Stack-Based Buffer Overflow in libtasn1 v4.20.0 ASN.1 Parsing

Publication date: 2026-01-07

Last updated on: 2026-02-02

Assigner: CERT/CC

Description

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-07

Last Modified

2026-02-02

Generated

2026-07-06

AI Q&A

2026-01-08

EPSS Evaluated

2026-07-05

NVD

CVE-2025-13151

Affected Vendors & Products

Vendor	Product	Version / Range
gnutls	libtasn1	4.20.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a stack-based buffer overflow in libtasn1 version 4.20.0. It occurs because the function asn1_expend_octet_string fails to properly validate the size of input data, which can lead to a buffer overflow.

Impact Analysis

The vulnerability can lead to a buffer overflow, which may cause a denial of service or potentially allow an attacker to execute arbitrary code, impacting the availability of the affected system.

Hi! I’m here to help you understand CVE-2025-13151. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70