PT-2025-34448 · Mouse07410 · Asn1C

Zhouxt1 · Published 2025-08-22 · Updated 2025-08-22 · CVE-2025-55398

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: mouse07410 asn1c versions through 0.9.29

Description: An issue was discovered in decoders generated by asn1c. When using UPER (Unaligned Packed Encoding Rules), the decoders fail to enforce constraints on INTEGER values if the positive bound exceeds 32 bits in length. This can potentially allow incorrect or malicious input to be processed.

Recommendations: Update to a version of mouse07410 asn1c later than 0.9.29.

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2025-55398

Affected Products

Asn1C

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-55398 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55398 · Vendor Advisory
• https://github.com/mouse07410/asn1c/issues/222 · Note
• https://t.me/CVEtracker/30688 · Telegram Post
• https://twitter.com/CVEnew/status/1958933940024070476 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1958995917626814643 · Twitter Post