The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2.x before 2.3.3, and other products, does not verify that there is memory available for a UTF-16 surrogate pair, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted byte sequence.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 8, 2015 |
| Freebsd | — | Upgrade nodeUpgrade v8Upgrade node-develUpgrade iojsUpgrade v8-devel | Dec 10, 2025 | Jul 6, 2015 |
| Suse | — | Upgrade firefox-gdk-pixbuf-langUpgrade mozilla-nspr-develUpgrade firefox-libcairo-gobject2Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libffi4Upgrade mozilla-nsprUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libharfbuzz0Upgrade libsoftokn3-32bitUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade libfirefox-gobject-2_0-0Upgrade npm8Upgrade firefox-libffi7Upgrade firefox-gtk3-langUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-branding-upstreamUpgrade MozillaFirefox-translations-commonUpgrade firefox-atk-langUpgrade firefox-libgtk-3-0Upgrade mozilla-nssUpgrade firefox-gtk3-immodules-tigrignaUpgrade MozillaFirefoxUpgrade mozilla-nss-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-toolsUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-thaiUpgrade nodejs8-develUpgrade libfreebl3Upgrade firefox-libatk-1_0-0Upgrade firefox-glib2-toolsUpgrade libsoftokn3Upgrade firefox-libcairo2Upgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nspr-32bitUpgrade firefox-glib2-langUpgrade libfirefox-gio-2_0-0Upgrade nodejs8Upgrade nodejs8-docsUpgrade mozilla-nss-certsUpgrade mozilla-nss-develUpgrade libfreebl3-32bitUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-inuktitut | Dec 12, 2019 | Jul 9, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub