SZB-745869b426
EUVD-2026-114330: asn1c OPEN TYPE decoding flaw can crash consuming programs
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- mouse07410
- Product
- asn1c
- First seen
Summary
The EUVD entry describes a flaw in asn1c versions before 1.2.5 where OPEN TYPE decoding can dereference an unallocated member pointer. The item says this can crash the program that uses the library, and no CVSS score is listed.
If you use mouse07410
Upgrade asn1c to version 1.2.5 or later
Review code paths that decode OPEN TYPE data from untrusted input
Monitor consuming applications for crashes
What the sources say 1
· Mastodon: “Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointer and crash the consuming program.” Source