Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-hmqg-p8f8-3qrw: Out-of-bounds Read in fast-string-search

All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory.

ghsa
#git

Out-of-bounds Read in fast-string-search

Moderate severity GitHub Reviewed Published Jun 18, 2022 • Updated Jun 20, 2022

Related news

CVE-2022-25872: Out-of-bounds Read in fast-string-search | CVE-2022-25872 | Snyk

All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory.