CVE-2024-29900

Summary

CVE-2024-29900 is a vulnerability affecting Electron Packager, a tool used to bundle Electron-based applications for distribution. The issue allows for the leakage of up to 10kb of Node.js heap memory adjacent to a known buffer into the final executable. This memory may contain sensitive information such as environment variables or secret files. The vulnerability has been addressed in the 18.3.1 release.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.