GCVE-110-NCSC-2026-315

Advisory PublishedCVSS 6.8/10

Vulnetix · Advisory published August 19, 2026

A stack-based buffer overflow vulnerability (CVE-2025-13151) in libtasn1's asn1_expend_octet_string function allows remote attackers to cause Denial of Service (DoS) due to improper input size validation.

Download JSON Open in Console

Weaknesses (CWE)

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-427Uncontrolled Search Path ElementCWE-476NULL Pointer DereferenceCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Risk Scores

CVSS 3.1

6.8/10

Medium · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

Aliases

CVE-2025-13151 CVE-2025-14821 CVE-2026-0968 CVE-2026-60592 CVE-2026-65914 CVE-2026-70724 CVE-2026-71073 CVE-2026-71079 CVE-2026-71084

References

advisory

Browse GCVE Records

2,661 records in the GCVE database · Updated September 7, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON