CVE-2023-26110

node-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation in npm/node-bluetooth

Identifiers

CVE-2023-26110, GHSA-cxx3-36qc-m6qm

Package Slug

npm/node-bluetooth

Vulnerability

node-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation

Description

All versions of the package node-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.

Affected Versions

All versions up to 1.2.6

Solution

Unfortunately, there is no solution available yet.

Last Modified

2023-03-10

source