CVE-2017-12966: ASN1C Project ASN1C

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service (segmentation fault) via a crafted .asn1 file.

Affected products

• ASN1C Project ASN1C: version 0.9.28 only

Published 2017-08-20. Last modified 2026-06-17.