CVE-2025-59464 | BDVDB-2026-311331 Detail

Description#

A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freeing the allocated buffer. When applications call `socket.getPeerCertificate(true)`, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through repeated TLS connections. Over time this can lead to resource exhaustion and denial of service.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-01-20Record published in the CVE List.
2. Version 22026-01-21Most recent update recorded in the CVE List.