Skip to content
OpenAdvisories

Vendor

esa

4 known vulnerabilities.

Products

asn1scc 3 sleapi-j 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-76077

    ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT()

    ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT() in asn1crt/asn1crt_encoding_xer.c, which is reached by all XER decode paths, copies tag characters into a fixed char Value[100] field without a length boun…

    esa asn1scc
  • High 8.1
    CVE-2026-75614

    ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)

    ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStream_DecodeConstraintWholeNumber in asn1crt/asn1crt_encoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encod…

    esa asn1scc