CVE-2023-26110 HIGH

CVE-2023-26110

Vendor N/A
Product node-bluetooth
Weakness CWE-120
Published March 9, 2023
Last update February 28, 2025
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P

What the vulnerability does

01Description

All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.

Key dates

02Disclosure timeline

March 9, 2023 CVE published
February 28, 2025 Record updated