CVE-2018-21270

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a…

published December 3, 2020

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03682 · 89.6th percentile
Published
2020-12-03T21:00Z
EPSS history
Timeline
  • 03 DEC 21:00Z
    Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a…
    cvelistv5