~ / search / GHSA-q6m5-f73j-m9mc

GHSA-q6m5-f73j-m9mc

Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-54257

Packages

EcosystemPackageAffectedFixed in
npm electron >= 42.3.1, < 42.3.3 42.3.3

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Most apps will crash and some may perform incorrect buffer allocations in the Node.js `Buffer` API resulting in unexpected truncation or allocation. ### Workarounds No workarounds. Do not use these impacted Electron releases ### Fixed Versions * `42.3.3` ### For more information If you have any questions or comments about this advisory, email us at [[email protected]](mailto:[email protected])

References

External links from the advisory. They lead to third-party sites.