asn1scc vulnerabilities

2 known vulnerabilities in asn1scc from Esa. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  asn1scc: Buffer Copy without Checking Size of Input

  CVE-2026-76077Nov 5, 2026Esa

  ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT() in asn1crt/asn1crt_encoding_xer.c, which is reached by all XER decode paths, copies tag characters into a fixed char Value[100] field without a length bound

• 8.1 High severity

  asn1scc: Improper Validation of Array Index

  CVE-2026-75614Nov 5, 2026Esa

  ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStream_DecodeConstraintWholeNumber in asn1crt/asn1crt_encoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encode