CVE-2019-25049: OpenBSD Libressl

High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days.

LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).

Affected products

• OpenBSD Libressl: from 2.9.1, up to and including 3.2.1

Published 2021-07-01. Last modified 2026-06-17.