CVE-2024-21525

CVE-2024-21525 affects the node-twain package. The root cause is improper checking/handling of exceptionally long source data when constructing a new twain.TwainSDK with properties like productName, productFamily, manufacturer, or version.info whose length is >= 34 characters, causing a buffer...

CVE-2024-21525

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length = 34 chars leads t...