CVE-2016-5080 in Oracle Communications Performance Intelligence Center (PIC) Software

Summary

Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.

Reservation

05/26/2016

Disclosure

07/19/2016

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
125382	Oracle Communications Performance Intelligence Center (PIC) Software Objective System ASN1C integer overflow	190	Not defined	Official fix	CVE-2016-5080
94981	Google Android Qualcomm integer overflow	190	Not defined	Official fix	CVE-2016-5080
90260	Cisco ASR 5000 ASN1C asn1rt_a.lib rtxMemHeapAlloc integer overflow	190	Not defined	Official fix	CVE-2016-5080
90138	ASN1C asn1rt_a.lib rtxMemHeapAlloc integer overflow	190	Not defined	Official fix	CVE-2016-5080