https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:56:40 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-42560 cnvd-2019-42560 https://cve.radiocsirt.org/vuln/cnvd-2019-42560 https://cve.radiocsirt.org/vuln/euvd-2026-177981 EUVD-2026-177981 https://cve.radiocsirt.org/vuln/euvd-2026-177981 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7166 <p>In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory. This method is intended to be safe and only return initialized, or cleared, memory. The third argument specifying `encoding` can be passed as a number, this is misinterpreted by `Buffer&#39;s` internal &#34;fill&#34; method as the `start` to a fill operation. This flaw may be abused where `Buffer.alloc()` arguments are derived from user input to return uncleared memory blocks that may contain sensitive information.</p> <p>In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory. This method is intended to be safe and only return initialized, or cleared, memory. The third argument specifying `encoding` can be passed as a number, this is misinterpreted by `Buffer&#39;s` internal &#34;fill&#34; method as the `start` to a fill operation. This flaw may be abused where `Buffer.alloc()` arguments are derived from user input to return uncleared memory blocks that may contain sensitive information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-7166 https://cve.radiocsirt.org/vuln/ghsa-6v28-c2x2-8p46 <p>In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory. This method is intended to be safe and only return initialized, or cleared, memory. The third argument specifying `encoding` can be passed as a number, this is misinterpreted by `Buffer&#39;s` internal &#34;fill&#34; method as the `start` to a fill operation. This flaw may be abused where `Buffer.alloc()` arguments are derived from user input to return uncleared memory blocks that may contain sensitive information.</p> <p>In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory. This method is intended to be safe and only return initialized, or cleared, memory. The third argument specifying `encoding` can be passed as a number, this is misinterpreted by `Buffer&#39;s` internal &#34;fill&#34; method as the `start` to a fill operation. This flaw may be abused where `Buffer.alloc()` arguments are derived from user input to return uncleared memory blocks that may contain sensitive information.</p> https://cve.radiocsirt.org/vuln/ghsa-6v28-c2x2-8p46 https://cve.radiocsirt.org/vuln/gsd-2018-7166 gsd-2018-7166 https://cve.radiocsirt.org/vuln/gsd-2018-7166 https://cve.radiocsirt.org/vuln/rhba-2019:0772 <p>nodejs: Unintentional exposure of uninitialized memory</p> <p>nodejs: Unintentional exposure of uninitialized memory</p> https://cve.radiocsirt.org/vuln/rhba-2019:0772