4 matches found
CVE-2026-75614
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...
CVE-2026-75614
The ASN1SCC open-source ASN.1 compiler for embedded systems is vulnerable to an out-of-bounds write prior to version 4.7.0.1 . The root cause lies in the BitStream_DecodeConstraintWholeNumber function within asn1crt/asn1crt_encoding.c, which fails to reject values exceeding the declared range whe...
EUVD-2026-117599
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...
CVE-2026-75614 ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...