← All advisories

High severity7.1NVD Advisory· Published Jul 1, 2021· Updated Jun 17, 2026

CVE-2019-25048

CVE-2019-25048

Description

LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_item_print).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

OpenBSD/Libressl
cpe:2.3:a:openbsd:libressl:*:*:*:*:*:*:*:*
Range: >=2.9.1,<=3.2.1
LibreSSL/LibreSSLdescription
LibreSSL/LibreSSLllm-fuzzy
Range: 2.9.1 - 3.2.1

Patches

Vulnerability mechanics

References

3

github.com/libressl-portable/portable/commit/17c88164016df821df2dff4b2b1291291ec4f28anvdPatchThird Party Advisory
bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitIssue TrackingPatchThird Party Advisory
github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1923.yamlnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.