Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-62298— asn1c: ASAN crash with decode of open types

Quick assessment

Affected
mouse07410 asn1c
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

mouse07410/asn1c 是一款 ASN.1 编译器。在 1.2.5 版本之前， 解码过程可能解引用一个未分配内存的成员指针，从而导致调用程序崩溃。具体而言， 中的 、 中的 、 中的 ，以及 中的 均存在相同的问题模式：对 进行的条件空指针检查仅在成员确实存在时才会重置其“存在性”标志，但随后代码却无条件地基于该指针与成员偏移量计算内部值。如果该 成员尚未分配内存，则对空指针的算术运算及随后的读取操作将引发段错误（segmentation fault）。该安全公告展示了 在 UPER 和 APER 编码下

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
mouse07410 asn1c < 1.2.5 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-62298

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
asn1c: ASAN crash with decode of open types
Source: CVE Program / CVE List V5
Vulnerability Description
mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointer and crash the consuming program. `OPEN_TYPE_aper_get` in `OPEN_TYPE_aper.c`, `OPEN_TYPE_ber_get` in `OPEN_TYPE_ber.c`, `OPEN_TYPE_oer_get` in `OPEN_TYPE_oer.c`, and `OPEN_TYPE_uper_get` in `OPEN_TYPE_uper.c` share the pattern: a conditional null check on `*memb_ptr2` resets presence only when the member exists, but execution then unconditionally computes an inner value from that pointer and a member offset. If the `OPEN TYPE` member has not been allocated, the null-pointer arithmetic and subsequent read cause a segmentation fault. The advisory demonstrates UPER and APER crashes for `E2connectionUpdateAcknowledge`, notes that `E2AP` uses APER, and provides a BER reproducer; OER is also explicitly identified as affected. This issue is fixed in version 1.2.5.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
空指针解引用
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
mouse07410 asn1c < 1.2.5 -

II. Public POCs for CVE-2026-62298

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-62298

请登录查看更多情报信息。

Other References for CVE-2026-62298 (4)

IV. Related Vulnerabilities

Same product: asn1c
Same vendor: mouse07410
Same weakness: CWE-476