CVE search · CVE-2025-13151
CVE-2025-13151
high 7.5
Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- cret@cert.org
- Weakness
- CWE-787
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | high 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- gnu · libtasn1
References
- https://gitlab.com/gnutls/libtasn1Product
- https://gitlab.com/gnutls/libtasn1/-/merge_requests/121Patch
- http://www.openwall.com/lists/oss-security/2026/01/08/5Mailing ListPatch
- https://www.kb.cert.org/vuls/id/271649Third Party Advisory