CVE-2025-13151
High · 7.5CVSS
7.5
EPSS
1.2%
Published
Jan 7, 2026
CISA due date
—
The record
Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:9 | libtasn1 | 0 | 4.21.0-1.mga9 |
| SUSE:Linux Enterprise Micro 5.2 | libtasn1 | 0 | 4.13-150000.4.14.1 |
| SUSE:Linux Enterprise Micro 5.3 | libtasn1 | 0 | 4.13-150000.4.14.1 |
| SUSE:Linux Enterprise Micro 5.4 | libtasn1 | 0 | 4.13-150000.4.14.1 |
| SUSE:Linux Enterprise Micro 5.5 | libtasn1 | 0 | 4.13-150000.4.14.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | libtasn1 | 0 | 4.13-150000.4.14.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | libtasn1 | 0 | 4.9-3.19.1 |
| openSUSE:Leap 15.6 | libtasn1 | 0 | 4.13-150000.4.14.1 |
| openSUSE:Leap 16.0 | libtasn1 | 0 | 4.21.0-160000.1.1 |
| openSUSE:Tumbleweed | libtasn1 | 0 | 4.21.0-1.1 |
Related vulnerabilities
- CVE-2018-1000654 GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS… Also affects libtasn1
- CVE-2016-4008 The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when… Also affects libtasn1
- CVE-2015-3622 The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows… Also affects libtasn1
- CVE-2015-2806 Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote… Also affects libtasn1
- CVE-2014-3467 Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as… Also affects libtasn1
- CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli… CWE-787
- CVE-2026-112397 Pillow is a Python imaging library. CWE-787
- CVE-2026-112059 libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point… CWE-787