Aikido Intel
Secure My Code
Intel

AIKIDO-2024-10028

electron is vulnerable to Out-of-bounds Read

Out-of-bounds ReadCVE-2024-3156 Published Apr 15, 2024

60

Medium Risk

This Affects:

JSelectron
27.0.0 - 27.3.9
Fixed in 27.3.10
28.0.0 - 28.2.10
Fixed in 28.3.0
29.0.0 - 29.2.0
Fixed in 29.3.0
Are you affected? Scan for Free

TL;DR

A flaw in the implementation of V8 in Google Chrome versions prior to 123.0.6312.105 allowed a remote attacker to potentially exploit out-of-bounds memory access through a specially crafted HTML page. (Chromium security severity: High)

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

electron is vulnerable to Out-of-bounds Read in versions 29.0.0 - 29.2.0, 28.0.0 - 28.2.10 and 27.0.0 - 27.3.9.

How to fix this

Upgrade the electron library to a patch version.

Links

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free
Book a Demo

Free. No credit card required.

Aikido Platform
Subscribe
Stay up to date with all updates
LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Ghent, Belgium | San Francisco, US
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
Get Security Done