CVE-2025-13151

CVE-2025-13151

High · published January 7, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

⚡ A cheeky buffer overflow hides in libtasn1 v4.20.0, ready to overflow when it gets a little too much input! Think of it like a suitcase that’s overloaded – if you keep cramming in clothes without checking the size, the zipper will burst open. In this case, the program overflow can lead to serious issues when it mishandles oversized data inputs. An attacker could exploit this vulnerability to corrupt the memory of the application, potentially executing arbitrary code and taking control of the system. This could lead to data breaches or even a complete system compromise, turning your server into a playground for malicious exploits!

Put simply

Think of it like a suitcase that’s overloaded – if you keep cramming in clothes without checking the size, the zipper will burst open. In this case, the program overflow can lead to serious issues when it mishandles oversized data inputs. This stack-based buffer overflow occurs because the asn1_expend_octet_string function in libtasn1 does not properly validate the size of the incoming data, allowing attackers to overflow the buffer.

What to do

An attacker could exploit this vulnerability to corrupt the memory of the application, potentially executing arbitrary code and taking control of the system. This could lead to data breaches or even a complete system compromise, turning your server into a playground for malicious exploits! Update to libtasn1 version 4.20.1 or later immediately to patch this vulnerability. Additionally, review your application’s input validation processes to ensure they accommodate safe data handling practices! You've got this! With a quick update, you’ll be back in control and your systems will be secure in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01175 · 67.3th percentile
Published
2026-01-07T21:14Z
EPSS history
Timeline
  • 07 JAN 21:14Z
    CVE-2025-13151
    cvelistv5