Lucene search
K

5 matches found

RedHat Linux
RedHat Linux
added 2026/02/18 8:42 a.m.4 views

nodejs: Nodejs uninitialized memory exposure

A memory exposure flaw has been discovered in Node.js. A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the vm module with the timeout option. Under specific timing conditions, buffers allocated with Buffer.alloc and other...

7.1CVSS7.4AI score0.00039EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2026/02/10 12:58 p.m.2 views

nodejs: Nodejs uninitialized memory exposure

A memory exposure flaw has been discovered in Node.js. A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the vm module with the timeout option. Under specific timing conditions, buffers allocated with Buffer.alloc and other...

7.1CVSS5.8AI score0.00039EPSS
Exploits0References5
OSV
OSV
added 2026/01/26 2:47 p.m.4 views

BIT-NODE-2025-55131

A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the vm module with the timeout option. Under specific timing conditions, buffers allocated with Buffer.alloc and other TypedArray instances like Uint8Array may contain leftover...

7.1CVSS6.1AI score0.00039EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2026/01/20 8:41 p.m.4 views

CVE-2025-55131

A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the vm module with the timeout option. Under specific timing conditions, buffers allocated with Buffer.alloc and other TypedArray instances like Uint8Array may contain leftover...

7.1CVSS7.3AI score0.00039EPSS
Exploits0
CVE
CVE
added 2026/01/20 8:41 p.m.8 views

CVE-2025-55131

CVE-2025-55131 relates to Node.js buffer allocation in the vm module with timeout, which can expose uninitialized memory in buffers (Buffer.alloc and Uint8Array) under specific timing. Connected advisories confirm the issue affects multiple Node.js packages across distributions (examples: nodejs1...

7.1CVSS5.8AI score0.00039EPSS
Exploits0References1
Rows per page
Query Builder