What’s Vulnerable › Vulnerabilities

CVE-2024-21525

• Severity: high (CVSS 8.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-10 · updated 2026-06-17
• Weakness: CWE-703

Description

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length >= 34 chars leads to a buffer overflow vulnerability.

Affected products

• Luomusha Node-Twain: all versions

References

• https://gist.github.com/dellalibera/55b87634a6c360e5be22a715f0566c99
• https://security.snyk.io/vuln/SNYK-JS-NODETWAIN-6421153
• https://gist.github.com/dellalibera/55b87634a6c360e5be22a715f0566c99
• https://security.snyk.io/vuln/SNYK-JS-NODETWAIN-6421153

Get alerted when CVE-2024-21525 or the next vulnerability affects your stack