critical9.9
CVE-2023-28445
Deno improperly handles resizable ArrayBuffer
Impact
### Impact [Resizable ArrayBuffers](https://github.com/tc39/proposal-resizablearraybuffer) passed to asynchronous native functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not affected. ### Patches The problem has been resolved by disabling resizable ArrayBuffers temporarily in Deno 1.32.1. A future version of Deno will re-enable resizable ArrayBuffers with a proper fix. ### Workarounds Upgrade to Deno 1.32.1, or run with `--v8-flags=--no-harmony-rab-gsab` to disable resizable ArrayBuffers.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | Deno | = 1.32.0 | 1.32.1 |
| rust | serde_v8 | = 0.87.0 | 0.88.0 |
| rust | deno_runtime | = 0.102.0 | 0.103.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deno | Deno | Version 1.32.0 |
| Deno | Deno Runtime | Version 0.102.0 |
| Deno | Serde V8 | Version 0.87.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/denoland/deno/pull/18395
- https://github.com/denoland/deno/releases/tag/v1.32.1
- https://github.com/denoland/deno/security/advisories/GHSA-c25x-cm9x-qqgx
- https://github.com/advisories/GHSA-c25x-cm9x-qqgx
- https://nvd.nist.gov/vuln/detail/CVE-2023-28445
- https://github.com/denoland/deno/pull/18452