Unrated severityOSV Advisory· Published Jan 7, 2026· Updated Jan 20, 2026
CVE-2025-13151
CVE-2025-13151
Description
Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
194.16.0, gnutls_0_5_0, gnutls_0_5_1, …+ 1 more
- (no CPE)range: 4.16.0, gnutls_0_5_0, gnutls_0_5_1, …
- (no CPE)range: = v4.20.0
- osv-coords17 versionspkg:rpm/almalinux/libtasn1pkg:rpm/almalinux/libtasn1-develpkg:rpm/almalinux/libtasn1-toolspkg:rpm/opensuse/libtasn1&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/libtasn1&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/libtasn1&distro=openSUSE%20Tumbleweedpkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5pkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Micro%206.1pkg:rpm/suse/libtasn1&distro=SUSE%20Linux%20Micro%206.2
< 4.20.0-5.el10_2+ 16 more
- (no CPE)range: < 4.20.0-5.el10_2
- (no CPE)range: < 4.20.0-5.el10_2
- (no CPE)range: < 4.20.0-5.el10_2
- (no CPE)range: < 4.13-150000.4.14.1
- (no CPE)range: < 4.21.0-160000.1.1
- (no CPE)range: < 4.21.0-1.1
- (no CPE)range: < 4.13-150000.4.14.1
- (no CPE)range: < 4.13-150000.4.14.1
- (no CPE)range: < 4.13-150000.4.14.1
- (no CPE)range: < 4.13-150000.4.14.1
- (no CPE)range: < 4.13-150000.4.14.1
- (no CPE)range: < 4.21.0-160000.1.1
- (no CPE)range: < 4.21.0-160000.1.1
- (no CPE)range: < 4.9-3.19.1
- (no CPE)range: < 4.19.0-5.1
- (no CPE)range: < 4.19.0-slfo.1.1_3.1
- (no CPE)range: < 4.21.0-160000.1.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.