CVE-2026-75614

    Dashboard / Vulnerabilities / CVE-2026-75614

    CVE-2026-75614

    Published: 5 Nov 2026Last Modified: 7 Nov 2026

    Summary: ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)

    Details: ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStream_DecodeConstraintWholeNumber in asn1crt/asn1crt_encoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generated uPER and ACN decoders for variable-size SEQUENCE OF, OCTET STRING, BIT STRING, and string values use the invalid result as a loop or copy length, so a crafted over-range size field can write beyond a destination buffer. Decoding untrusted affected data can corrupt heap or stack memory, cause a crash, or potentially permit code execution. This issue is fixed in version 4.7.0.1.

    References: https://github.com/esa/asn1scc/releases/tag/4.7.0.1, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75614.json, https://github.com/esa/asn1scc/security/advisories/GHSA-825c-7h77-2jjq, https://nvd.nist.gov/vuln/detail/CVE-2026-75614, https://github.com/esa/asn1scc/commit/fe6ab763bc60d8a2def4104c15414809b45fffd9

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -8437befc92eb04f20a47c38f4ac4742c0ff1617c

    Affected versions

    4.6.0.17
    4.6.0.14
    4.6.0.12
    4.6.0.9
    4.6.0.8
    4.6.0.5
    4.6.0.2
    4.6.0.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-75614 | CVE-DB