Most recent entries from all

EUVD-2026-57148

fkie_cve-2019-15549

An issue was discovered in the asn1_der crate before 0.6.2 for Rust. Attackers can trigger memory exhaustion by supplying a large value in a length field.

GHSA-v5r6-6r3c-wqxc — Memory exhaustion in asn1_der

Affected: crates.io: asn1_der

An issue was discovered in the asn1_der crate before 0.6.2 for Rust. Attackers can trigger memory exhaustion by supplying a large value in a length field.

gsd-2019-15549

RUSTSEC-2019-0007 — Processing of maliciously crafted length fields causes memory allocation SIGABRTs

Affected: crates.io: asn1_der

Affected versions of this crate tried to preallocate a vector for an arbitrary amount of bytes announced by the ASN.1-DER length field without further checks.

This allows an attacker to trigger a SIGABRT by creating length fields that announce more bytes than the allocator can provide. The flaw was corrected by not preallocating memory.