Vulnerability · Published Mar 23, 2023 · Assigned by GitHub_M

CVE-2023-28445Deno improperly handles resizable ArrayBuffer

Critical 10.0

In plain English

A critical-severity out-of-bounds read in deno from denoland. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)1.0%top 37.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asynchronous functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not affected. The problem has been resolved by disabling resizable ArrayBuffers temporarily in Deno 1.32.1. Deno 1.32.2 will re-enable resizable ArrayBuffers with a proper fix. As a workaround, run with `--v8-flags=--no-harmony-rab-gsab` to disable resizable ArrayBuffers.

Affected products (as reported)

Vendor	Product	Versions
denoland	deno	= 1.32.0

Weakness: CWE-125, CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

https://github.com/denoland/deno/security/advisories/GHSA-c25x-cm9x-qqgx x_refsource_CONFIRM
https://github.com/denoland/deno/pull/18395 x_refsource_MISC
https://github.com/denoland/deno/releases/tag/v1.32.1 x_refsource_MISC