CVE-2019-3728: dell bsafe_crypto-c Out-of-bounds Read
Vulnerability summary
CVE-2019-3728 is a high (CVSS 7.5) Out-of-bounds Read vulnerability in dell bsafe_crypto-c. EPSS estimates a 2.40% chance of exploitation in the next 30 days, higher than 83.8% of scored vulnerabilities.
Timeline
- 30-09-2019PublishedVulnerability first disclosed.
- 04-11-2025Last modifiedVulnerability information updated.
Description
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4.* are vulnerable to an out-of-bounds read vulnerability when processing DSA signature. A malicious remote user could potentially exploit this vulnerability to cause a crash in the library of the affected system.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
2.40%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
+0.02 pp
From 2.38% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Dell6 products
- bsafe_crypto-c≥ 6.0.0, ≤ 6.4
- bsafe_crypto-c-micro-edition≥ 4.0.0, < 4.0.5.4 | ≥ 4.1.0, < 4.1.4
- bsafe_micro-edition-suite≥ 4.0.0, < 4.0.13 | ≥ 4.1.0, < 4.4.0
- rsa bsafe crypto-c micro edition≥ 4.0.0.0, < 4.0.5.4 | ≥ 4.1.0, < 4.1.4
- rsa bsafe micro edition suite≥ 4.0.0, < 4.0.13 | ≥ 4.1.0, < 4.4
1 vendor · 6 products
References
3 links- www.dell.com/support/kbdoc/000194054Vendor Advisory