CVE-2023-28445

CVE-2023-28445 describes an out-of-bounds read/write vulnerability in Deno 1.32.0, specifically impacting Deno, deno_runtime, and serde_v8. This critical vulnerability (CVSS 9.8) arises when resizable ArrayBuffers, shrunk during asynchronous operations, are passed to asynchronous functions, potentially leading to full compromise of confidentiality, integrity, and availability. While the vulnerability is easily exploitable over the network with low attack complexity, there is no evidence of active exploitation, public exploit code, or significant community discussion. A temporary fix was implemented in Deno 1.32.1, and a permanent solution is expected in Deno 1.32.2.