Known vulnerabilities in libtASN1

Vendor: GNU
Software: libtASN1
Software CPE: cpe:2.3:a:gnu:libtasn1:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libtASN1 libtASN1 is affected by 10 known vulnerabilities: 1 critical, 8 medium, 1 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128533 - Out-of-bounds write
CVE-2006-0645
CWE-787 Critical
No
No
0.2.18 30.04.2026 SB2006021001
SB2006020601
#VU121181 - Stack-based buffer overflow
CVE-2025-13151
CWE-121 Medium
No
No
4.21.0 12.01.2026 SB2026011266
SB2026011267
SB2026011354
and 18 more
#VU103980 - Resource exhaustion
CVE-2024-12133
CWE-400 Medium
No
No
4.20.0 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU68858 - Off-by-one Error
CVE-2021-46848
CWE-193 Medium
No
No
4.19.0 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU18291 - Improper input validation
CVE-2016-4008
CWE-20 Medium
No
No
4.8 17.04.2019 SB2016050501
SB2017032807
SB2016050502
and 5 more
#VU18290 - Improper input validation
CVE-2018-1000654
CWE-20 Low
No
No
4.14 17.04.2019 SB2018082017
SB2019060302
SB2019060502
and 6 more
#VU6890 - Stack-based buffer overflow
CVE-2017-6891
CWE-121 Medium
No
No
- 02.06.2017 SB2017060222
SB2017060224
SB2017060611
and 11 more
#VU32528 - Improper input validation
CVE-2014-3469
CWE-20 Medium
No
No
3.6 05.06.2014 SB2014060507
SB2014060903
SB2014072402
and 7 more
#VU33843 - Improper input validation
CVE-2014-3467
CWE-20 Medium
No
No
3.6 05.06.2014 SB2014060510
SB2014060901
SB2014072402
and 7 more
#VU33844 - Improper input validation
CVE-2014-3468
CWE-20 Medium
No
No
3.6 05.06.2014 SB2014060511
SB2014060902
SB2014072402
and 7 more