CVE-2026-75615

    Dashboard / Vulnerabilities / CVE-2026-75615

    CVE-2026-75615

    Published: 5 Nov 2026Last Modified: 7 Nov 2026

    Summary: ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decoders

    Details: ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the ACN runtime function Acn_Dec_String_CharIndex_private in asn1crt/asn1crt_encoding_acn.c and the generated uPER decoder InternalItem_string_with_alpha_decode in StgC/uper_c.stg do not validate a decoded character index before reading allowedCharSet. For string alphabets whose size is not a power of two, a crafted message can select an unused encoded index, read a small bounded window of adjacent static program constants, and return the byte as a successfully decoded character. The full 128-character IA5String alphabet is not affected. This issue is fixed in version 4.7.0.1.

    References: https://github.com/esa/asn1scc/releases/tag/4.7.0.1, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75615.json, https://github.com/esa/asn1scc/security/advisories/GHSA-234q-m7gr-pcf8, https://nvd.nist.gov/vuln/detail/CVE-2026-75615, https://github.com/esa/asn1scc/commit/fe6ab763bc60d8a2def4104c15414809b45fffd9

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -8437befc92eb04f20a47c38f4ac4742c0ff1617c

    Affected versions

    4.6.0.17
    4.6.0.14
    4.6.0.12
    4.6.0.9
    4.6.0.8
    4.6.0.5
    4.6.0.2
    4.6.0.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-75615 | CVE-DB