Lucene search
+L

1 matches found

OSV
OSV
added 2025/05/19 2:15 a.m.8 views

AZL-61913 CVE-2025-23165 affecting package nodejs for versions less than 20.14.0-9

In Node.js, the ReadFileUtf8 internal binding leaks memory due to a corrupted pointer in uvfss.file: a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set. This results in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory...

3.7CVSS6.8AI score0.0048EPSS
SaveExploits0References1
Rows per page
Query Builder