CVE-2024-21525
CVE-2024-21525 affects the node-twain package. The root cause is improper checking/handling of exceptionally long source data when constructing a new twain.TwainSDK with properties like productName, productFamily, manufacturer, or version.info whose length is >= 34 characters, causing a buffer...