Threat Intel

v0.1

← CVEs

CVE-2025-59464

HIGH 7.5
Published
2026-01-20
Last Modified
2026-01-30
Affected Apps
5
Affected Devices
49
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freeing the allocated buffer. When applications call `socket.getPeerCertificate(true)`, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through repeated TLS connections. Over time this can lead to resource exhaustion and denial of service.
Affected Applications in Environment 5
Node.js v24.6.0
41 devices
Node.js v24.2.0
1 device
Node.js v24.9.0
1 device
Node.js v24.11.1
4 devices
Node.js v24.11.0
2 devices
Affected Devices 49
DPCUBC-8N8BC64 Windows DPHSOB-1NXC094 Windows DPINFT-02609239 Windows DPINFT-MJ0CFS1F Windows DPUWRL-PF5C7SY3 Windows EBB115-01 Windows EBB115-02 Windows EBB115-04 Windows EBB115-08 Windows EBB115-09 Windows EBB115-10 Windows EBB115-11 Windows EBB115-12 Windows EBB115-13 Windows EBB115-14 Windows EBB115-15 Windows EBB115-16 Windows EBB115-17 Windows EBB115-18 Windows EBB115-19 Windows EBB115-20 Windows EBB115-21 Windows EBB115-22 Windows EBB115-23 Windows EBB115-24 Windows EBB115-25 Windows EBB115-26 Windows EBB115-27 Windows EBB115-28 Windows ETAL-197569 Windows HH124-12 Windows HH124-18 Windows HH124-20 Windows HH124-22 Windows HH124-33 Windows HH124-35 Windows HH124-37 Windows HH124-40 Windows HH124-42 Windows HH124-50 Windows HH124-53 Windows HH124-55 Windows HH124-57 Windows HH124-59 Windows HH124-61 Windows HH124-63 Windows HH124-65 Windows LAPTOP-6UP13PGQ Windows UB-B201-PC Windows
References 1