bigint-buffer Buffer Overflow Vulnerability in toBigIntLE() Function

A buffer overflow vulnerability has been identified in the bigint-buffer package, specifically in the toBigIntLE() function. This vulnerability, present in all versions starting from 0.0.0, can be exploited by attackers to cause the application to crash.

Impact

Exploitation of this vulnerability leads to a buffer overflow, causing a hard crash of the application.

Reproduction

The vulnerability can be reproduced by invoking the toBigIntLE() function of the bigint-buffer package with crafted input that exploits the buffer overflow condition. This can be done by passing a value that the function does not properly validate, causing it to write beyond the allocated memory buffer.