Intel

AIKIDO-2025-10116

electron is vulnerable to Heap Buffer Overflow

Heap Buffer OverflowCVE-2025-0999 Published Feb 27, 2025

88

High Risk

This Affects:

JSelectron
32.0.0 - 32.3.1
Fixed in 32.3.2
33.0.0 - 33.4.1
Fixed in 33.4.2
Are you affected? Scan for Free

TL;DR

Affected versions of this package are affected by a heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

electron is vulnerable to Heap Buffer Overflow in versions 32.0.0 - 32.3.1 and 33.0.0 - 33.4.1.

How to fix this

Upgrade the electron library to a patch version.