critical9.8
CVE-2023-26110
node-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation
Impact
All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | node-bluetooth | <= 1.2.6 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Node-Bluetooth Project | Node-Bluetooth | through 1.2.6 |