7.5

CVE-2025-13151: gnu libtasn1 Out-of-bounds Write

CVSS: 7.5v3.1HighAnalyzed
AliasesALPINE-CVE-2025-13151MGASA-2026-0007SUSE-SU-2026:0118-1
Published 07-01-2026Last modified 20-01-2026
Open JSON

Vulnerability summary

CVE-2025-13151 is a high (CVSS 7.5) Out-of-bounds Write vulnerability in gnu libtasn1. EPSS estimates a 1.18% chance of exploitation in the next 30 days, higher than 67% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
1.18%
0%100%
Low · +0.03 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 2
USN-7954-1USN-7954-2

Timeline

  1. 07-01-2026
    PublishedVulnerability first disclosed.
  2. 20-01-2026
    Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

1.18%

Chance of exploitation in the next 30 days

Percentile

67%

Versus all other CVEs

30-day change

+0.03 pp

From 1.15% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse11 products
  • libtasn1&distro=SUSE Linux Enterprise Micro 5.2< 4.13-150000.4.14.1
  • libtasn1&distro=SUSE Linux Enterprise Micro 5.3< 4.13-150000.4.14.1
  • libtasn1&distro=SUSE Linux Enterprise Micro 5.4< 4.13-150000.4.14.1
  • libtasn1&distro=SUSE Linux Enterprise Micro 5.5< 4.13-150000.4.14.1
  • libtasn1&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7< 4.13-150000.4.14.1
Redhat6 products
  • libtasn1< 0:4.20.0-5.el10_2 | < 0:4.16.0-10.el9_8 | < 0:4.13-6.el8_10 | < 0:4.21.0-1.1.hum1
  • libtasn1-debuginfo< 0:4.20.0-5.el10_2 | < 0:4.16.0-10.el9_8 | < 0:4.13-6.el8_10
  • libtasn1-debugsource< 0:4.20.0-5.el10_2 | < 0:4.16.0-10.el9_8 | < 0:4.13-6.el8_10
  • libtasn1-devel< 0:4.20.0-5.el10_2 | < 0:4.16.0-10.el9_8 | < 0:4.13-6.el8_10 | < 0:4.21.0-1.1.hum1
  • libtasn1-tools< 0:4.20.0-5.el10_2 | < 0:4.16.0-10.el9_8 | < 0:4.13-6.el8_10 | < 0:4.21.0-1.1.hum1
Opensuse3 products
  • libtasn1&distro=openSUSE Leap 15.6< 4.13-150000.4.14.1
  • libtasn1&distro=openSUSE Leap 16.0< 4.21.0-160000.1.1
  • libtasn1&distro=openSUSE Tumbleweed< 4.21.0-1.1
Alpine1 product
  • libtasn1< 4.21.0-r0
Debian1 product
  • libtasn1-6All versions (No fix recorded) | < 4.20.0-2+deb13u1 | < 4.21.0-2
Gnu1 product
Gnutls1 product
Mageia1 product
  • libtasn1< 4.21.0-1.mga9
Ubuntu1 product
  • libtasn1-6< 3.4-3ubuntu0.6+esm1 | < 4.7-3ubuntu0.16.04.3+esm4 | < 4.13-2ubuntu0.1~esm1 | < 4.16.0-2ubuntu0.1+esm1 | < 4.18.0-4ubuntu0.2 | < 4.19.0-3ubuntu0.24.04.2 | < 4.20.0-2ubuntu0.25.10.1

9 vendors · 26 products

References

35 links
Show all 35 references