GCVE-110-NCSC-2026-309

Advisory PublishedCVSS 7.5/10

Vulnetix · Advisory published August 19, 2026

A stack-based buffer overflow vulnerability (CVE-2025-13151) in libtasn1's asn1_expend_octet_string function allows remote attackers to cause Denial of Service (DoS) due to improper input size validation.

Download JSON Open in Console

Weaknesses (CWE)

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-1395Dependency on Vulnerable Third-Party ComponentCWE-94Improper Control of Generation of Code ('Code Injection')CWE-226Sensitive Information in Resource Not Removed Before ReuseCWE-416Use After FreeCWE-770Allocation of Resources Without Limits or ThrottlingCWE-502Deserialization of Untrusted DataCWE-551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Risk Scores

CVSS 3.1

7.5/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2025-13151 CVE-2026-29167 CVE-2026-4176 CVE-2026-42587 CVE-2026-42779 CVE-2026-4800 CVE-2026-55956 CVE-2026-5795 CVE-2026-59084 CVE-2026-71142 CVE-2026-71143

References

advisory

Browse GCVE Records

3,521 records in the GCVE database · Updated September 6, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON