CVE-2025-13151

EPSS 0.06%
Veröffentlicht 07.01.2026 21:14:05
Zuletzt bearbeitet 02.02.2026 19:27:23
Quelle cret@cert.org
CVE-Watchlists
Login
Unerledigt
Login

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Gnu ≫ Libtasn1 Version4.20.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.172

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://gitlab.com/gnutls/libtasn1

Product

https://gitlab.com/gnutls/libtasn1/-/merge_requests/121

Patch

http://www.openwall.com/lists/oss-security/2026/01/08/5

Patch

Mailing List

https://www.kb.cert.org/vuls/id/271649

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-13151

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-13151

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-13151

EUVD