CVE-2020-8174

PoC —

CVSS 3.1

8.1 high

EPSS

8%p94

Published

Jul 24, 2020 (Jul 24, 2020)

Modified

Jun 17, 2026

Description

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.

Vendors: nodejs oracle netapp
Products: node.js, banking extensibility workbench, blockchain platform, mysql cluster, retail xstore point of service, active iq unified manager, oncommand insight, oncommand workflow automation, snapcenter
Weakness: CWE-119, CWE-191
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.6%)

In the news0 stories

No ingested article mentions this CVE yet.