Esa vulnerabilities
We track 2 vulnerabilities in Esa products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Esa vulnerabilities
- 8.1 High severity
asn1scc: Buffer Copy without Checking Size of Input
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT() in asn1crt/asn1crt_encoding_xer.c, which is reached by all XER decode paths, copies tag characters into a fixed char Value[100] field without a length bound
- 8.1 High severity
asn1scc: Improper Validation of Array Index
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStream_DecodeConstraintWholeNumber in asn1crt/asn1crt_encoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encode