bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function

Description

Versions of the package bigint-buffer from 0.0.0 to 1.1.5 are vulnerable to Buffer Overflow in the toBigIntLE() function. Attackers can exploit this to crash the application.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.1.5

References

• GHSA-3gc7-fjrx-p6mg
• security.snyk.io
• www.usenix.org
• CVE-2025-3194
• CWE-120
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Vite has an `server.fs.deny` bypass with an invalid `request-target` - CVE-2025-32395
• Redwood is vulnerable to account takeover via dbAuth "forgot-password - Vulnerability
• bootstrap Cross-site Scripting vulnerability (GHSA-ph58-4vrj-w6hr) 2 - CVE-2018-20677
• Bootstrap Cross-site Scripting vulnerability (GHSA-7mvr-5x2g-wfc8) 2 - CVE-2018-14042

Tags:

npm

bigint-buffer