CVE-2026-62298

mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointer and crash the consuming program. `OPEN_TYPE_aper_get` in `OPEN_TYPE_aper.c`, `OPEN_TYPE_ber_get` in `OPEN_TYPE_ber.c`, `OPEN_TYPE_oer_get` in `OPEN_TYPE_oer.c`, and `OPEN_TYPE_uper_get` in `OPEN_TYPE_uper.c` share the pattern: a conditional null check on `*memb_ptr2` resets presence only when the member exists, but execution then unconditionally computes an inner value from that pointer and a member offset. If the `OPEN TYPE` member has not been allocated, the null-pointer arithmetic and subsequent read cause a segmentation fault. The advisory demonstrates UPER and APER crashes for `E2connectionUpdateAcknowledge`, notes that `E2AP` uses APER, and provides a BER reproducer; OER is also explicitly identified as affected. This issue is fixed in version 1.2.5.

• CWE-476

• https://github.com/mouse07410/asn1c/commit/3f7d3bbac8cd195d552945e79586ca5000f33280
• https://github.com/mouse07410/asn1c/commit/71ae41bd1cb146a432a39f72010b48f45ad69463
• https://github.com/mouse07410/asn1c/releases/tag/v1.2.5
• https://github.com/mouse07410/asn1c/security/advisories/GHSA-rcj5-gcvg-x796

Published

Oct 30, 2026

Last Modified

Oct 30, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-62292libheif is a HEIF and AVIF file format decoder and encoder. …8.7
• CVE-2026-62293HAPI FHIR is a complete implementation of the HL7 FHIR stand…5
• CVE-2026-62294Flameshot is powerful yet simple to use screenshot software.…5.1
• CVE-2026-62295HAPI FHIR is a complete implementation of the HL7 FHIR stand…7.5
• CVE-2026-62296HAPI FHIR is a complete implementation of the HL7 FHIR stand…7.5
• CVE-2026-62297ag-psd is a JavaScript library for reading and writing Photo…7.5
• CVE-2026-62299CoreDNS is a DNS server written in Go. Prior to 1.14.5, the …5.3
• CVE-2026-6230The Tainacan plugin for WordPress is vulnerable to time-base…7.5
• CVE-2026-62300Filecoin Pin is an IPFS Pinning Service API implementation t…6.5
• CVE-2026-62301MyTube is a self-hosted downloader and player for several vi…7.1
• CVE-2026-62302MyTube is a self-hosted downloader and player for several vi…8.7
• CVE-2026-62303Pistache is a high-performance REST toolkit written in C++. …5.9