ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decoders

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the ACN runtime function Acn_Dec_String_CharIndex_private in asn1crt/asn1crt_encoding_acn.c and the generated uPER decoder InternalItem_string_with_alpha_decode in StgC/uper_c.stg do not validate a decoded character index before reading allowedCharSet. For string alphabets whose size is not a power of two, a crafted message can select an unused encoded index, read a small bounded window of adjacent static program constants, and return the byte as a successfully decoded character. The full 128-character IA5String alphabet is not affected. This issue is fixed in version 4.7.0.1.

Etkilenen sürümler1 yazılım

Kaynaklar5 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…sn1scc/security/advisories/GHSA-234q-m7gr-pcf8 Diğer
• github.com/…ommit/fe6ab763bc60d8a2def4104c15414809b45fffd9 Diğer
• github.com/esa/asn1scc/releases/tag/4.7.0.1 Diğer

Kayıt geçmişi

1. 5 Kas 2026 19:49Yayımlandı

İlgili açıklar

• 8,1 CVE-2026-76077ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT()
• 8,1 CVE-2026-75614ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)
• 8,2 CVE-2026-92698FastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-bounds read
• 7,5 CVE-2026-92697FastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds read
• 8,2 CVE-2026-92693FastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser
• 8,2 CVE-2026-92695FastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames