CVE-2025-13151

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cret@cert.org

Published

2026-01-07

Last modified

2026-01-20

Weaknesses

CWE-787

Affected products

• Libtasn1 (Gnu)
• Libtasn1 (Gnutls)

References

• https://gitlab.com/gnutls/libtasn1
• https://gitlab.com/gnutls/libtasn1/-/merge_requests/121
• http://www.openwall.com/lists/oss-security/2026/01/08/5
• https://www.kb.cert.org/vuls/id/271649