libtasn1 Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in libtasn1 version 4.20.0. The issue arises in the asn1_expend_octet_string function, which fails to properly validate the size of input data, leading to the buffer overflow.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can potentially be exploited to execute arbitrary code.

Remediation

Users can update to the latest version of libtasn1 to address this vulnerability. The fixed version is available in the official libtasn1 repository on GitLab.