npm node-bluetooth security vulnerability

npm node-bluetooth is a Node.js serial port communication for Bluetooth from npm USA. A security vulnerability exists in npm node-bluetooth that stems from incorrect user input length validation, which can be exploited by an attacker to cause a buffer overflow via the findSerialPortChannel method...

PT-2023-20496

Name of the Vulnerable Software and Affected Versions node-bluetooth-serial-port versions all Description The issue is related to a Buffer Overflow vulnerability via the findSerialPortChannel method due to improper user input length validation. This allows for potential exploitation. No informati...

PT-2023-20497

Name of the Vulnerable Software and Affected Versions node-bluetooth versions all Description The issue arises from improper user input length validation, leading to a Buffer Overflow via the findSerialPortChannel method. Recommendations For all versions, as a temporary workaround, consider...

CVE-2023-26110: Buffer Copy without Checking Size of Input

All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation. PoC js const BluetoothSerialPort = require"node-bluetooth" const serial = new BluetoothSerialPort.DeviceINQ...

@byinti/printer-js (>=0.0.1, <=0.0.6), @dkaframework/printer (1.0.1) +18 more potentially affected by CVE-2023-26110 via node-bluetooth (1.2.6)

node-bluetooth NPM version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth and may be impacted: - @byinti/printer-js =0.0.1, =1.0.3, =1.2.11, =0.0.3, =2.5.0, =0.0.1-alpha.0, =0.1.0, =0.1.8, =1.0.3, =0.1.3, =0.1.5 - flexprinter 0.0....

iobroker.combustion-control (0.0.1), jcode-ble (0.0.1) +1 more potentially affected by CVE-2023-26109 via node-bluetooth-serial-port (2.2.7)

node-bluetooth-serial-port NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth-serial-port and may be impacted: - iobroker.combustion-control 0.0.1 - jcode-ble 0.0.1 - jcode-bluetooth =0.1.0, =0.9.2 Source cves:...