CVE-2019-25048: OpenBSD Libressl

High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days.

LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_item_print).

Affected products

• OpenBSD Libressl: from 2.9.1, up to and including 3.2.1

Published 2021-07-01. Last modified 2026-06-17.