CVE-2016-5080

Critical

Published: 19/07/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before version 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) on a system running an application compiled by ASN1C, via crafted ASN.1 data.

Risk Assessment

This vulnerability may lead to the execution of malicious code or application crashes, posing a serious security threat to systems using ASN1C.

Recommendation

It is recommended to upgrade to ASN1C version 7.0.2 or later to mitigate this vulnerability and to conduct an audit of applications using this library.

Original NVD description (English source)

Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.