{"schema":"threatline.record/2","record":{"id":"CVE-2026-92947","aliases":["GHSA-fcqc-726x-5wfc"],"summary":"vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool","details":"### Summary\nSandboxed code is able to disclose host memory used by small allocations by `Buffer.from`, `Buffer.concat`.\n\n### Details\nvm2 exposes `Buffer` object to sandboxed code by default. Small [`Buffer` allocations](https://nodejs.org/api/buffer.html#static-method-bufferallocunsafesize) (for example, [Buffer.allocUnsafe()](https://nodejs.org/api/buffer.html#static-method-bufferallocunsafesize), [Buffer.from(array)](https://nodejs.org/api/buffer.html#static-method-bufferfromarray), [Buffer.from(string)](https://nodejs.org/api/buffer.html#static-method-bufferfromstring-encoding), and [Buffer.concat()](https://nodejs.org/api/buffer.html#static-method-bufferconcatlist-totallength)) use the same Buffer pool, which is shared with the sandbox. This allows sandboxed code to disclose host memory used by the functions listed above.\n\n### PoC\nTested against `vm2@3.11.5` in the node REPL.\n```javascript\nBuffer.from('host-memory-should-not-leak-to-sandbox')\nnew (require('vm2').VM)().run(`Buffer.from(Buffer.from([0]).buffer, 0, Buffer.from([0]).buffer.byteLength).toString('ascii')`)\n```\n\n<img width=\"1044\" height=\"104\" alt=\"Screenshot 2026-07-23 at 17 54 15\" src=\"https://github.com/user-attachments/assets/987b860c-6702-4818-bfaa-c77919c777e5\" />\n\n### Impact\nSince sandbox acquires an ArrayBuffer that is used by the host, it can disclose sensitive data going through functions mentioned above and even write to these buffers, which can lead to sensitive data exposure and potentially denial-of-service.","categories":["Libraries & packages"],"product":"vm2","vendor":"patriksimek","ecosystem":"npm","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fcqc-726x-5wfc","source_modified_at":"2026-10-05T22:34:36Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"vm2"},"range":"<= 3.11.6"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92947","source_modified_at":"2026-09-17T15:47:14.117Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"vm2","vendor":"patriksimek","versions":[{"version":"0","status":"affected","versionType":"semver","lessThan":"3.11.7"},{"version":"3.11.7","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fcqc-726x-5wfc","source_modified_at":"2026-10-05T22:45:05.487849035Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"vm2","purl":"pkg:npm/vm2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.11.7"}],"type":"SEMVER"}],"versions":[]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-fcqc-726x-5wfc","source_modified_at":"2026-10-05T22:34:36Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"vm2"},"version":"3.11.7"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92947","source_modified_at":"2026-09-17T15:47:14.117Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"vm2","ecosystem":null},"version":"3.11.7","basis":"first unaffected version stated in the CVE record"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-fcqc-726x-5wfc","source_modified_at":"2026-10-05T22:45:05.487849035Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"npm","name":"vm2","purl":"pkg:npm/vm2"},"version":"3.11.7"}],"cvss":10,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00482,"percentile":0.40644,"score_date":"2026-10-23"},"published_at":"2026-09-17T13:46:08.167Z","modified_at":"2026-10-05T22:45:05.487849035Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-fcqc-726x-5wfc","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-05T22:34:36Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-92947","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-09-17T15:47:14.117Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-fcqc-726x-5wfc","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-05T22:45:05.487849035Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-92947","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-fcqc-726x-5wfc","tags":["exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92947","source":"GitHub Advisory Database"},{"url":"https://github.com/patriksimek/vm2/commit/4f2508abeb252aa86eb6761c78b3b000248fb089","source":"GitHub Advisory Database"},{"url":"https://github.com/patriksimek/vm2/releases/tag/v3.11.7","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/vm2-before-3.11.7-memory-disclosure-via-buffer-pool","tags":["third-party-advisory"]},{"url":"https://github.com/advisories/GHSA-fcqc-726x-5wfc","source":"GitHub Advisory Database"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"poc","automatable":"yes","technical_impact":"total","assessed_at":"2026-09-17T15:46:48.210651Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-05T22:45:05.487849035Z","content_hash":"ee9be06329ca7de904bbcabc4c3e7ef2ed9e2e636f17943c9ea41d156e1e4d68"}}