CVE-2020-23921

2021-04-2118:15:08

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.2%

An issue was discovered in fast_ber through v0.4. yy::yylex() in asn_compiler.hpp has a heap-based buffer over-read.

CPENameOperatorVersion
fast_bereq0.3
fast_bereq0.4
fast_bereq0.1
fast_bereq0.2

Name	Operator	Version
fast_ber	eq	0.3
fast_ber	eq	0.4
fast_ber	eq	0.1
fast_ber	eq	0.2

References

cwe.mitre.org/data/definitions/126.html

github.com/Samuel-Tyler/fast_ber/issues/30