Skip to main content

CISA alerts on libtasn1 stack overflow in v4.20.0 and earlier

Source Decision Insights Threat Desk Published January 20, 2026 Companies 2
Human View Machine View

2 companies named across 6 categories, one of 235 articles referencing Microsoft. Previous coverage: IBM launches Enterprise Advantage service (Jan 2026).

Companies mentioned

Best suited for

Seniority
Architect
Job function
Cybersecurity / Information Security
Persona
Security Architect
Buyer role
Architect / Technical Evaluator
Decision stage
Post Buy
Adoption curve
Early Majority
Industry
Information Technology / Software & Services / IT Services / Internet Services & Infrastructure

Our classification, not the publisher's statement. Best suited for, not only for.

GNU libtasn1 versions v4.20.0 and earlier contain a stack-based buffer overflow in their Autonomous System Number (ASN).1 parsing code that can overwrite adjacent memory and produce unexpected behavior when processing ASN.1 input.

The issue is tracked as CVE-2025-13151 and involves the function asn1_expand_octet_string in the file decoding.c. GNU libtasn1 is a low-level C library for manipulating ASN.1 data and encoding rules, including Distributed Energy Resource (DER) as defined by ITU-T Recommendations X.680 and X.690. The vulnerability stems from unbounded use of strcpy and strcat to assemble a local stack buffer named name from the fields definitions->name and p2->name; if both source strings reach their maximum allowed length, concatenation with a separator character (“.”) and a terminating null byte leaves the destination undersized by one byte, and the final null terminator written by strcat overflows the buffer by a single byte.

An attacker can trigger the one-byte overflow by supplying malformed ASN.1 data that violates the library’s expectation that passed ASN.1 structures have been validated by the calling application. The overflow’s one-byte size limits the scope of the condition, and exploitation is constrained and may be further mitigated by compiler protections such as stack canaries, _FORTIFY_SOURCE, and other hardening mechanisms. Because GNU libtasn1 is used in cryptographic libraries and security-sensitive contexts, malformed ASN.1 input that triggers this condition could cause parsing failures or abnormal behavior during cryptographic operations, including signature verification and cryptographic data validation.

A patch addressing the issue has been proposed to the GNU libtasn1 project and is available for review and testing at https://gitlab.com/gnutls/libtasn1/-/merge_requests/121. Developers and integrators are encouraged to evaluate that merge request and to apply mitigations referenced by the project, such as replacing unbounded string operations with bounded alternatives or safer formatting functions, to remove the overflow condition in affected versions. Read https://gitlab.com/gnutls/libtasn1/-/blob/master/NEWS.md for updates.

Contact us about this vulnerability and provide a vendor statement as appropriate. Acknowledgements: Benny Zelster from Microsoft Research coordinated the disclosure; this document was written by Vijay Sarvepalli.

Blog post, originally published by Vijay Sarvepalli at kb.cert.org.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-alerts-on-libtasn1-stack-overflow-in-v4-20-0-and-earlier/",
        "name": "CISA alerts on libtasn1 stack overflow in v4.20.0 and earlier",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-alerts-on-libtasn1-stack-overflow-in-v4-20-0-and-earlier/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/microsoft/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/microsoft/",
      "name": "Microsoft"
    },
    "articleSection": [
      "Cybersecurity",
      "Data Center",
      "Network Operator"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Seniority",
        "audienceType": "Architect"
      },
      {
        "@type": "Audience",
        "additionalType": "Job function",
        "audienceType": "Cybersecurity / Information Security"
      },
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Architect"
      },
      {
        "@type": "Audience",
        "additionalType": "Buyer role",
        "audienceType": "Architect / Technical Evaluator"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Software & Services / IT Services / Internet Services & Infrastructure"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T14:38:34-06:00",
    "datePublished": "2026-01-20T10:23:58-07:00",
    "description": "GNU libtasn1 vulnerability: a one-byte stack overflow in v4.20.0 and earlier can corrupt memory when parsing ASN.1; patch proposed.",
    "headline": "CISA alerts on libtasn1 stack overflow in v4.20.0 and earlier",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Vijay Sarvepalli"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://kb.cert.org/vuls/id/271649"
    },
    "keywords": [
      "Autonomous System Number",
      "Distributed Energy Resource",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-alerts-on-libtasn1-stack-overflow-in-v4-20-0-and-earlier/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/microsoft/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/microsoft/",
        "name": "Microsoft"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages