Attributed metadata history
Up to 100 retained publisher events per page for CVE-2018-7166. Withdrawals and unavailable references remain attributed to their publishers.
nvd
observed · 2026-10-12 05:28:42 UTC
In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory. This method is intended to be safe and only return initialized, or cleared, memory. The third argument specifying `encoding` can be passed as a number, this is misinterpreted by `Buffer's` internal "fill" method as the `start` to a fill operation. This flaw may be abused where `Buffer.alloc()` arguments are derived from user input to return uncleared memory blocks that may contain sensitive information.
Fingerprint: 603bfde3359f65b2938fc10426bc42babcdb40af94de0fcbc4410bdceb226a40
nvd
available · 2026-10-12 04:02:58 UTC
available
Fingerprint: 1a480b1c570dfec82c1cc39b732387360c17935637e0981c7b0fd9c8798dc341