Memory Leak Vulnerability in Node.js Affected by OpenSSL Integration

CVE-2025-59464

What is CVE-2025-59464?

A memory leak problem has been identified in the OpenSSL integration within Node.js, stemming from the mishandling of X.509 certificate fields during UTF-8 conversion. When applications invoke the socket.getPeerCertificate(true) method, each call leads to memory being allocated without cleanup. This flaw can be exploited by remote clients who repeatedly establish TLS connections, resulting in continuous memory growth. If left unaddressed, this can culminate in resource exhaustion, severely impacting server performance and potentially leading to a denial of service.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References