CVE-2016-5080

Critical · 9.8

CVSS

9.8

EPSS

10.1%

Published

Jul 19, 2016

CISA due date

—

The record

Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.

Affected packages

Ecosystem	Package	Introduced	Fixed