~ / search / GHSA-c25x-cm9x-qqgx

GHSA-c25x-cm9x-qqgx

Deno improperly handles resizable ArrayBuffer

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-28445

Packages

EcosystemPackageAffectedFixed in
crates.io Deno >= 1.32.0, < 1.32.1 1.32.1
crates.io serde_v8 >= 0.87.0, < 0.88.0 0.88.0
crates.io deno_runtime >= 0.102.0, < 0.103.0 0.103.0

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact [Resizable ArrayBuffers](https://github.com/tc39/proposal-resizablearraybuffer) passed to asynchronous native functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not affected. ### Patches The problem has been resolved by disabling resizable ArrayBuffers temporarily in Deno 1.32.1. A future version of Deno will re-enable resizable ArrayBuffers with a proper fix. ### Workarounds Upgrade to Deno 1.32.1, or run with `--v8-flags=--no-harmony-rab-gsab` to disable resizable ArrayBuffers.

References

External links from the advisory. They lead to third-party sites.