Vulnerability in ASN.1 Compiler Affects mouse07410
CVE-2026-62298

NONE

Key Information:

Vendor

Mouse07410

Status
Asn1c
Vendor
CVE Published:
30 October 2026

What is CVE-2026-62298?

The ASN.1 compiler 'asn1c' prior to version 1.2.5 contains a vulnerability related to the OPEN_TYPE decoding process. This issue arises when the system attempts to dereference an unallocated member pointer, resulting in potential segmentation faults during execution. Specifically, functions such as OPEN_TYPE_aper_get, OPEN_TYPE_ber_get, OPEN_TYPE_oer_get, and OPEN_TYPE_uper_get inadvertently compute values from an uninitialized pointer, leading to program crashes. The vulnerability affects various encoding schemes, including UPER, APER, and OER. The issue has been addressed in version 1.2.5, highlighting the importance of timely updates to mitigate risks.

Affected Version(s)

asn1c < 1.2.5

References

https://github.com/mouse07410/asn1c/security/advisories/G...
x_refsource_CONFIRM
https://github.com/mouse07410/asn1c/commit/3f7d3bbac8cd19...
x_refsource_MISC
https://github.com/mouse07410/asn1c/commit/71ae41bd1cb146...
x_refsource_MISC

CVSS V4

Score:
Severity:
NONE
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.