PT-2025-34448 · Mouse07410 · Asn1C

Zhouxt1 · Publicado 2025-08-22 · Atualizado 2025-08-22 · CVE-2025-55398

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: mouse07410 asn1c versions through 0.9.29

Description: An issue was discovered in decoders generated by asn1c. When using UPER (Unaligned Packed Encoding Rules), the decoders fail to enforce constraints on INTEGER values if the positive bound exceeds 32 bits in length. This can potentially allow incorrect or malicious input to be processed.

Recommendations: Update to a version of mouse07410 asn1c later than 0.9.29.

Correção

Enumeração de Fraquezas

CWE-1284

Identificadores relacionados

CVE-2025-55398

Produtos afetados

Asn1C

Referências · 6

• https://github.com/mouse07410/asn1c/issues/222 · Nota
• https://t.me/CVEtracker/30688 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1958933940024070476 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-55398 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-55398 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1958995917626814643 · Publicação no Twitter