UNKNOWN npm

Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow

GHSA-q6m5-f73j-m9mc · CVE-2026-54257

Published · Modified

Description

Impact

Most apps will crash and some may perform incorrect buffer allocations in the Node.js Buffer API resulting in unexpected truncation or allocation.

Workarounds

No workarounds. Do not use these impacted Electron releases

Fixed Versions

  • 42.3.3

For more information

If you have any questions or comments about this advisory, email us at security@electronjs.org

Ready to move

Start Securing

Free, no credit card | First findings in minutes