CVE-2020-8174CWE-119

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0

published July 24, 2020

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07646 · 94.6th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2020-07-24T21:45Z
EPSS history
Timeline
  • 24 JUL 21:45Z
    napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0
    cvelistv5