CVE-2019-3728: Dell Bsafe Crypto-C

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4.* are vulnerable to an out-of-bounds read vulnerability when processing DSA signature. A malicious remote user could potentially exploit this vulnerability to cause a crash in the library of the affected system.

Affected products

• Dell Bsafe Crypto-C: from 6.0.0, up to and including 6.4
• Dell Bsafe Crypto-C-Micro-Edition: from 4.0.0, before 4.0.5.4 (fixed in 4.0.5.4); from 4.1.0, before 4.1.4 (fixed in 4.1.4)
• Dell Bsafe Micro-Edition-Suite: from 4.0.0, before 4.0.13 (fixed in 4.0.13); from 4.1.0, before 4.4.0 (fixed in 4.4.0)

Published 2019-09-30. Last modified 2026-06-17.