Headline
GHSA-6jmw-6mxw-w4jc: BER/CER/DER decoder panics on invalid input
NLnet Labs’ bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding.
BER/CER/DER decoder panics on invalid input
High severity GitHub Reviewed Published Sep 13, 2023 to the GitHub Advisory Database • Updated Sep 14, 2023
Related news
CVE-2023-39914
NLnet Labs’ bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding.