CVE-2020-8244
- State
- Published
- Severity
- Not scored
- Published
- Aug 30, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jan 28, 2020
Description
A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via regular .slice() calls.
Scores
The record has no CVSS score.
Weaknesses
- CWE-126 Buffer Over-read (CWE-126)
Affected Products
| Product | Versions |
|---|---|
bln/a |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.