CVE-2021-39157 - CVE House
Back to Database
Status published High CVE-2021-39157

Improper Handling of Exceptional Conditions in detect-character-encoding

Vulnerability Description

detect-character-encoding is an open source character encoding inspection library. In detect-character-encoding v0.6.0 and earlier, data matching no charset causes the Node.js process to crash. The problem has been patched in [detect-character-encoding v0.7.0](https://github.com/sonicdoe/detect-character-encoding/releases/tag/v0.7.0). No workaround are available and all users should update to resolve this issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-39157

Credits & Attribution

No credits recorded in the NVD database.

References

More from sonicdoe

View All →
CVE-2021-39176
Missing Release of Memory after Effective Lifetime in detect-character-encoding
High 7.5
CVE-2021-39131
Improper Handling of Unexpected Data Type in ced
High 7.5

Affected Vendor

Affected Software

detect-character-encoding
Vulnerable Versions:
< 0.7.0

Timeline

Official Publish: August 24th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-755

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1203 Exploitation for Client Execution
Execution
T1213 Data from Information Repositories
Collection
T1499 Endpoint Denial of Service
Impact