Skip to content
Sign in
5.3 Medium

CVE-2022-25872 All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and…

Description

All versions of package fast-string-search are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows the attacker to read previously allocated memory.

Affected products and versions

Product Affected versions Fixed in
fast-string-search Versions not published

Other CVEs of fast-string-search

The 2 CVEs of fast-string-search →
CVE-2022-22138 All versions of package fast-string-search are vulnerable to Denial of Service (DoS) when computations are incorrect for… 7.5 High
Track this CVE