Node.js patches 16 flaws, including crashes and TLS key leaks
Fixed builds are v22.23.5, v24.22.3 and v26.13.1; seven issues are high and many are remotely triggerable.
Stories per day · 30 days
3 RSS
3 stories, newest first · one card per story
Stories tagged #memory-disclosure
Wiz: PHP flaws back to 5.4 allow RCE or memory reads
Wiz says unauthenticated attackers can run code or read process memory that may hold passwords and tokens.
Apple Xcode Integer Underflow Flaw Lets Crafted Archives Leak Memory and Crash Builds
Researchers disclosed an integer underflow in Apple's Mach-O archive parser that lets crafted static libraries crash Xcode builds or leak process memory.