CVE-2016-5080

Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.

• http://packetstormsecurity.com/files/137970/Objective-Systems-Inc.-ASN1C-For-C-C-Heap-Memory-Corruption.html
• http://seclists.org/fulldisclosure/2016/Jul/65
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160721-asn1c
• http://www.kb.cert.org/vuls/id/790839Third Party Advisory, US Government Resource
• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
• http://www.securityfocus.com/archive/1/538952/100/0/threaded
• http://www.securityfocus.com/bid/91836
• http://www.securitytracker.com/id/1036386
• https://github.com/programa-stic/security-advisories/tree/master/ObjSys/CVE-2016-5080Technical Description, Third Party Advisory
• https://source.android.com/security/bulletin/2017-01-01.html
• https://www.ncsc.nl/dienstverlening/response-op-dreigingen-en-incidenten/beveiligingsadviezen/NCSC-2016-0650+1.00+Kwetsbaarheid+verholpen+in+ASN1C.htmlThird Party Advisory
• http://packetstormsecurity.com/files/137970/Objective-Systems-Inc.-ASN1C-For-C-C-Heap-Memory-Corruption.html
• http://seclists.org/fulldisclosure/2016/Jul/65
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160721-asn1c
• http://www.kb.cert.org/vuls/id/790839Third Party Advisory, US Government Resource
• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
• http://www.securityfocus.com/archive/1/538952/100/0/threaded
• http://www.securityfocus.com/bid/91836
• http://www.securitytracker.com/id/1036386
• https://github.com/programa-stic/security-advisories/tree/master/ObjSys/CVE-2016-5080Technical Description, Third Party Advisory
• https://source.android.com/security/bulletin/2017-01-01.html
• https://www.ncsc.nl/dienstverlening/response-op-dreigingen-en-incidenten/beveiligingsadviezen/NCSC-2016-0650+1.00+Kwetsbaarheid+verholpen+in+ASN1C.htmlThird Party Advisory

Published

Jul 19, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5073CloudView NMS before 2.10a has XSS via SNMP.
• CVE-2016-5074CloudView NMS before 2.10a has a format string issue exploit…
• CVE-2016-5075CloudView NMS before 2.10a has XSS via a TELNET login.
• CVE-2016-5076CloudView NMS before 2.10a allows remote attackers to obtain…
• CVE-2016-5077Netikus EventSentry before 3.2.1.44 has XSS via SNMP.
• CVE-2016-5078Paessler PRTG before 16.2.24.4045 has XSS via SNMP.
• CVE-2016-5081ZModo ZP-NE14-S and ZP-IBH-13W devices have a hardcoded root…
• CVE-2016-5084Johnson & Johnson Animas OneTouch Ping devices do not use en…
• CVE-2016-5085Johnson & Johnson Animas OneTouch Ping devices do not proper…
• CVE-2016-5086Johnson & Johnson Animas OneTouch Ping devices allow remote …
• CVE-2016-5087Alertus Desktop Notification before 2.9.31.1710 on OS X uses…
• CVE-2016-5091Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and …