esa ASN1SCC prior 4.7.0.1 ACN Runtime/uPER Decoder asn1crt_encoding_acn.c out-of-bounds

Summaryinfo

A vulnerability labeled as problematic has been found in esa ASN1SCC. Impacted is the function Acn_Dec_String_CharIndex_private/InternalItem_string_with_alpha_decode of the file asn1crt/asn1crt_encoding_acn.c of the component ACN Runtime/uPER Decoder. Such manipulation leads to out-of-bounds. This vulnerability is documented as CVE-2026-75615. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in esa ASN1SCC and classified as problematic. Affected by this issue is the function Acn_Dec_String_CharIndex_private/InternalItem_string_with_alpha_decode of the file asn1crt/asn1crt_encoding_acn.c of the component ACN Runtime/uPER Decoder. The manipulation with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality. CVE summarizes:

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the ACN runtime function Acn_Dec_String_CharIndex_private in asn1crt/asn1crt_encoding_acn.c and the generated uPER decoder InternalItem_string_with_alpha_decode in StgC/uper_c.stg do not validate a decoded character index before reading allowedCharSet. For string alphabets whose size is not a power of two, a crafted message can select an unused encoded index, read a small bounded window of adjacent static program constants, and return the byte as a successfully decoded character. The full 128-character IA5String alphabet is not affected. This issue is fixed in version 4.7.0.1.

The advisory is available at github.com. This vulnerability is handled as CVE-2026-75615 since 08/18/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are known, but there is no available exploit.

Upgrading to version 4.7.0.1 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• esa

Name

• ASN1SCC

Website

• Product: https://github.com/esa/asn1scc/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion