Most recent entries from all

EUVD-2026-329653

fkie_cve-2026-54257

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.1 until 42.3.3, Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow. Most apps will crash and some may perform incorrect buffer allocations in the Node.js Buffer API resulting in unexpected truncation or allocation. This vulnerability is fixed in 42.3.3.

GHSA-q6m5-f73j-m9mc — Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow

Affected: npm: electron

### Impact Most apps will crash and some may perform incorrect buffer allocations in the Node.js `Buffer` API resulting in unexpected truncation or allocation.

### Workarounds No workarounds. Do not use these impacted Electron releases

### Fixed Versions * `42.3.3`

### For more information If you have any questions or comments about this advisory, email us at [security@electronjs.org](mailto:security@electronjs.org)