🎯 New Report #3857258: Reachable assertion in node:zlib sync API crashes the entire process via spoofed TypedArray byteLength (all 11 *Sync functions affected)
🔺Severity: Medium
👽 Reporter: byvini
⭐️ Reputation: 109
🛠 State: resolved
💼 Team: Node.js
💵 Bounty: null
🕐 Submitted: 2026-07-11
⏰ Disclosed: 2026-08-28 14:16:19
📝 Summary: A flaw was discovered in the synchronous Node.js zlib APIs that allowed a spoofed TypedArray byteLength to trigger a reachable assertion, causing the entire process to crash. All 11 synchronous zlib functions were affected.
📂 Report JSON File: 3857258
@hackeronereports