CVE-2021-45711: Simple ASN1 Project Simple ASN1

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in the simple_asn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f.

Affected products

• Simple ASN1 Project Simple ASN1: version 0.6.0 only

Published 2021-12-27. Last modified 2026-06-17.