What the vulnerability does

01Description

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.

Key dates

02Disclosure timeline

May 29, 2018 CVE published
September 17, 2024 Record updated