CVE-2020-23911: ASN1C Project ASN1C

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function _default_error_logger() located in asn1fix.c. It allows an attacker to cause Denial of Service.

Affected products

• ASN1C Project ASN1C: up to and including 0.9.28

Published 2023-07-18. Last modified 2026-06-17.