CVE-2023-26109CWE-120

All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length…

High · published March 9, 2023

CVSS v3.1
7.3
EPSS
1%
Percentile
50.8
In the wild
Unconfirmed
What it is

All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P
CVSS v4.0
Not supplied
EPSS
0.00656 · 50.8th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-03-09T05:00Z
EPSS history
Timeline
  • 09 MAR 05:00Z
    All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length…
    cvelistv5