CVE-2025-3194 HIGH

CVE-2025-3194

Vendor N/A

Product bigint-buffer

Weakness CWE-120

Published April 4, 2025

Last update April 4, 2025

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P

What the vulnerability does

01Description

Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE() function. Attackers can exploit this to crash the application.

Key dates

02Disclosure timeline

April 4, 2025 CVE published

April 4, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-3194 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/120.html

Related vulnerabilities

04Related CVE

CVE-2024-49830 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio CVE-2025-33131 Fixes to common vulnerabilities found in IBM Db2 High Performance Unload CVE-2025-5111 FreeFloat FTP Server TYPE Command buffer overflow CVE-2022-41010 CVE-2021-0249 Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.