12 matches found
CVE-2026-76077
A flaw was found in asn1scc. The XML Encoding Rules XER tokenizer does not properly enforce length bounds when copying tag data and fails to check buffer limits during input processing. A remote attacker could exploit this vulnerability by providing a crafted XER message, leading to stack memory...
CVE-2026-75614
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...
CVE-2026-75615
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the ACN runtime function AcnDecStringCharIndexprivate in asn1crt/asn1crtencodingacn.c and the generated uPER decoder InternalItemstringwithalphadecode in StgC/uperc.stg do not validate a decoded character index befor...
CVE-2026-76077
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT in asn1crt/asn1crtencodingxer.c, which is reached by all XER decode paths, copies tag characters into a fixed char Value100 field without a length bound and reads input and lookahead bytes withou...
CVE-2026-76077 ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT()
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT in asn1crt/asn1crtencodingxer.c, which is reached by all XER decode paths, copies tag characters into a fixed char Value100 field without a length bound and reads input and lookahead bytes withou...
CVE-2026-76077
The ASN1SCC open-source ASN.1 compiler for embedded systems is vulnerable to a stack buffer overflow and out-of-bounds read in the XER tokenizer NT() function located in asn1crt/asn1crt_encoding_xer.c. This component is accessed by all XER decode paths. The root cause is the copying of tag charac...
CVE-2026-75615 ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decoders
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the ACN runtime function AcnDecStringCharIndexprivate in asn1crt/asn1crtencodingacn.c and the generated uPER decoder InternalItemstringwithalphadecode in StgC/uperc.stg do not validate a decoded character index befor...
CVE-2026-75615
The ASN1SCC open-source ASN.1 compiler for embedded systems is vulnerable to an out-of-bounds read in versions prior to 4.7.0.1 . The root cause is a lack of validation for a decoded character index within the ACN runtime function Acn_Dec_String_CharIndex_private (in asn1crt/asn1crt_encoding_acn....
CVE-2026-75614
The ASN1SCC open-source ASN.1 compiler for embedded systems is vulnerable to an out-of-bounds write prior to version 4.7.0.1 . The root cause lies in the BitStream_DecodeConstraintWholeNumber function within asn1crt/asn1crt_encoding.c, which fails to reject values exceeding the declared range whe...
CVE-2026-75614 ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...
EUVD-2026-117599
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...
CVE-2026-75614 ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...