mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, OPEN TYPE decoding can dereference an unallocated member pointer and crash the consuming program. OPEN_TYPE_aper_get in OPEN_TYPE_aper.c, OPEN_TYPE_ber_get in OPEN_TYPE_ber.c, OPEN_TYPE_oer_get in OPEN_TYPE_oer.c, and OPEN_TY...
Vendor
mouse07410 vulnerabilities
2 published CVES affecting mouse07410, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unscored
- 1
- CISA KEV
- 0
Products
Latest mouse07410 CVEs
Newest publication first
-
NoneCVSS 0.0 EPSS 0.50%
-
HighCVSS 8.2 EPSS 0.20%
mouse07410/asn1c is an ASN.1 compiler. In 1.4 and earlier, a memory safety vulnerability was identified in the OER decoding skeleton files generated by asn1c (specifically INTEGER_oer.c). When parsing a maliciously crafted, zero-length OER payload for a variable-length, non-negat...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.