CVE-2024-27934

Summary

CVE-2024-27934 is a vulnerability affecting Deno, a JavaScript, TypeScript, and WebAssembly runtime. In versions 1.36.2 and prior to 1.40.3, the use of `*const c_void` and `ExternalPointer` resulted in a use-after-free issue. An attacker capable of executing code within a Deno runtime could exploit this flaw to gain arbitrary code execution on the host machine, bypassing permission barriers. The root cause is the underlying structure's memory being accessed after being freed. This vulnerability is known to be exploitable for both `*const c_void` and `ExternalPointer` implementations, and version 1.40.3 addresses the issue with necessary patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.