asn1scc memory overflow and read flaws in ASN.1 decoders
Programs reading outside data with asn1scc can crash or be taken over.
Summary
asn1scc is an ASN.1 compiler for embedded systems. Decoding untrusted uPER or ACN data can overflow memory, letting a program crash or potentially run attacker code.
Affected when
- Decoding untrusted data with uPER or ACN
- Generated code using variable-size types
What to do
Update asn1scc to 4.7.0.1 or later.
Products and platforms
CVE IDs
Sources
Times
First published
First seen