Vulnerability · Published Jan 7, 2026 · Assigned by certcc
CVE-2025-13151CVE-2025-13151
High 7.5
In plain English
A high-severity security flaw in libtasn1 from GnuTLS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.4%top 28.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | libtasn1 | 4.20.0-5.el10_2 | ALSA-2026:28235 |
| AlmaLinux:8 | libtasn1 | 4.13-6.el8_10 | ALSA-2026:36728 |
| AlmaLinux:9 | libtasn1 | 4.16.0-10.el9_8 | ALSA-2026:28253 |
| AlmaLinux:10 | libtasn1-devel | 4.20.0-5.el10_2 | ALSA-2026:28235 |
| AlmaLinux:8 | libtasn1-devel | 4.13-6.el8_10 | ALSA-2026:36728 |
| AlmaLinux:9 | libtasn1-devel | 4.16.0-10.el9_8 | ALSA-2026:28253 |
| AlmaLinux:10 | libtasn1-tools | 4.20.0-5.el10_2 | ALSA-2026:28235 |
| AlmaLinux:8 | libtasn1-tools | 4.13-6.el8_10 | ALSA-2026:36728 |
| AlmaLinux:9 | libtasn1-tools | 4.16.0-10.el9_8 | ALSA-2026:28253 |
| Alpine:v3.20 | libtasn1 | 4.21.0-r0 | ALPINE-CVE-2025-13151 |
| Alpine:v3.21 | libtasn1 | 4.21.0-r0 | ALPINE-CVE-2025-13151 |
| Alpine:v3.22 | libtasn1 | 4.21.0-r0 | ALPINE-CVE-2025-13151 |
| Alpine:v3.23 | libtasn1 | 4.21.0-r0 | ALPINE-CVE-2025-13151 |
| Alpine:v3.24 | libtasn1 | 4.21.0-r0 | ALPINE-CVE-2025-13151 |
| Debian:12 | libtasn1-6 | no fix listed | DEBIAN-CVE-2025-13151 |
| Debian:13 | libtasn1-6 | 4.20.0-2+deb13u1 | DEBIAN-CVE-2025-13151 |
| Debian:14 | libtasn1-6 | 4.21.0-2 | DEBIAN-CVE-2025-13151 |
| Rocky Linux:10 | libtasn1 | 0:4.20.0-5.el10_2 | RLSA-2026:28235 |
| Rocky Linux:8 | libtasn1 | 0:4.13-6.el8_10 | RLSA-2026:36728 |
| Rocky Linux:9 | libtasn1 | 0:4.16.0-10.el9_8 | RLSA-2026:28253 |
| Ubuntu:22.04:LTS | libtasn1-6 | 4.18.0-4ubuntu0.2 | UBUNTU-CVE-2025-13151 |
| Ubuntu:22.04:LTS | libtasn1-6 | 4.18.0-4ubuntu0.2 | USN-7954-1 |
| Ubuntu:24.04:LTS | libtasn1-6 | 4.19.0-3ubuntu0.24.04.2 | USN-7954-1 |
| Ubuntu:24.04:LTS | libtasn1-6 | 4.19.0-3ubuntu0.24.04.2 | UBUNTU-CVE-2025-13151 |
| Ubuntu:25.10 | libtasn1-6 | 4.20.0-2ubuntu0.25.10.1 | UBUNTU-CVE-2025-13151 |
| Ubuntu:25.10 | libtasn1-6 | 4.20.0-2ubuntu0.25.10.1 | USN-7954-1 |