ALPINE-CVE-2025-69420

Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An...

CVE-2025-69420

A type confusion vulnerability exists in the TimeStamp Response verification code within OpenSSL . The issue occurs because the functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access an ASN1_TYPE union member without first validating its type. When processing a malformed ...

CVE-2025-69420 Missing ASN1_TYPE validation in TS_RESP_verify_response() function

Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An...