Description (CNA)
All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length >= 34 chars leads to a buffer overflow vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / node-twain | affected 0 before * |
CWE
CWE-703
References
- https://security.snyk.io/vuln/SNYK-JS-NODETWAIN-6421153
- https://gist.github.com/dellalibera/55b87634a6c360e5be22a715f0566c99
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.