Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-06-23T17:08:31 electron: Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H CWE-131

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.1 until 42.3.3, Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow. Most apps will crash and some may perform incorrect buffer allocations in the Node.js Buffer API resulting in unexpected truncation or allocation. This vulnerability is fixed in 42.3.3.

A flaw was found in Electron, a framework for building cross-platform desktop applications. The Buffer implementation performs incorrect byte length calculations, resulting in a heap buffer underflow or overflow. An attacker could exploit this flaw to cause an application crash or trigger incorrect buffer allocations in the Node.js Buffer API, leading to unexpected data truncation or memory corruption, potentially allowing for arbitrary code execution.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Red Hat Build of Podman Desktop Not affected rh-podman-desktop.git https://www.cve.org/CVERecord?id=CVE-2026-54257 https://nvd.nist.gov/vuln/detail/CVE-2026-54257 https://github.com/electron/electron/security/advisories/GHSA-q6m5-f73j-m9mc