critical9.8
CVE-2023-26109
node-bluetooth-serial-port is vulnerable to Buffer Overflow via the findSerialPortChannel
Impact
All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | node-bluetooth-serial-port | <= 2.2.7 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Node-Bluetooth-Serial-Port Project | Node-Bluetooth-Serial-Port | All versions |