npm node-bluetooth security vulnerability

npm node-bluetooth is a Node.js serial port communication for Bluetooth from npm USA. A security vulnerability exists in npm node-bluetooth that stems from incorrect user input length validation, which can be exploited by an attacker to cause a buffer overflow via the findSerialPortChannel method...

PT-2023-20496

Name of the Vulnerable Software and Affected Versions node-bluetooth-serial-port versions all Description The issue is related to a Buffer Overflow vulnerability via the findSerialPortChannel method due to improper user input length validation. This allows for potential exploitation. No informati...

PT-2023-20497

Name of the Vulnerable Software and Affected Versions node-bluetooth versions all Description The issue arises from improper user input length validation, leading to a Buffer Overflow via the findSerialPortChannel method. Recommendations For all versions, as a temporary workaround, consider...

CVE-2023-26110: Buffer Copy without Checking Size of Input

All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation...

@byinti/printer-js (>=0.0.1, <=0.0.6), @dkaframework/printer (1.0.1) +18 more potentially affected by CVE-2023-26110 via node-bluetooth (1.2.6)

node-bluetooth NPM version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth and may be impacted: - @byinti/printer-js =0.0.1, =1.0.3, =1.2.11, =0.0.3, =2.5.0, =0.0.1-alpha.0, =0.1.0, =0.1.8, =1.0.3, =0.1.3, =0.1.5 - flexprinter 0.0....

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation. PoC js const BluetoothSerialPort = require"node-bluetooth" const serial = new BluetoothSerialPort.DeviceINQ...

iobroker.combustion-control (0.0.1), jcode-ble (0.0.1) +1 more potentially affected by CVE-2023-26109 via node-bluetooth-serial-port (2.2.7)

node-bluetooth-serial-port NPM version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-bluetooth-serial-port and may be impacted: - iobroker.combustion-control 0.0.1 - jcode-ble 0.0.1 - jcode-bluetooth =0.1.0, =0.9.2 Source cves:...