CVE-2026-76077

Name of the Vulnerable Software and Affected Versions ASN1SCC versions prior to 4.7.0.1

Description The XER tokenizer NT() in asn1crt/asn1crt encoding xer.c copies tag characters into a fixed Value[100] field without length bounds and reads input and lookahead bytes without verifying the buffer count. A specially crafted XER message containing an overlong tag can overwrite the tokenizer's stack frame. Additionally, a truncated tag or an unterminated comment sequence or processing-instruction can lead to reading beyond the input, potentially causing a CPU spin. These issues may result in adjacent memory disclosure, stack data corruption, system crashes, hangs, or potential code execution.

Recommendations Update to version 4.7.0.1.