mouse07410 asn1c up to 1.2.4 Decoding OPEN_TYPE_aper.c OPEN_TYPE_aper_get memb_ptr2 memory corruption

Summaryinfo

A vulnerability has been found in mouse07410 asn1c up to 1.2.4 and classified as problematic. Affected by this vulnerability is the function OPEN_TYPE_aper_get of the file OPEN_TYPE_aper.c of the component Decoding. The manipulation of the argument memb_ptr2 leads to memory corruption. This vulnerability is documented as CVE-2026-62298. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in mouse07410 asn1c up to 1.2.4 and classified as problematic. This issue affects the function OPEN_TYPE_aper_get of the file OPEN_TYPE_aper.c of the component Decoding. The manipulation of the argument memb_ptr2 with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is availability. The summary by CVE is:

mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointer and crash the consuming program. `OPEN_TYPE_aper_get` in `OPEN_TYPE_aper.c`, `OPEN_TYPE_ber_get` in `OPEN_TYPE_ber.c`, `OPEN_TYPE_oer_get` in `OPEN_TYPE_oer.c`, and `OPEN_TYPE_uper_get` in `OPEN_TYPE_uper.c` share the pattern: a conditional null check on `*memb_ptr2` resets presence only when the member exists, but execution then unconditionally computes an inner value from that pointer and a member offset. If the `OPEN TYPE` member has not been allocated, the null-pointer arithmetic and subsequent read cause a segmentation fault. The advisory demonstrates UPER and APER crashes for `E2connectionUpdateAcknowledge`, notes that `E2AP` uses APER, and provides a BER reproducer; OER is also explicitly identified as affected. This issue is fixed in version 1.2.5.

The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-62298 since 07/13/2026. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are known, but no exploit is available.

Upgrading to version 1.2.5 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-114330). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• mouse07410

Name

• asn1c

Version

• 1.2.0
• 1.2.1
• 1.2.2
• 1.2.3
• 1.2.4

Website

• Product: https://github.com/mouse07410/asn1c/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion