THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-62381 (MEDIUM 6.6) — luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1_add_obj (x509write.c) when signing a certificate with a 2040-bit RSA key. For a 255-byte signature, the BIT STRING allocation is computed from the DER length encoding of 255 bytes

[NVD] CVE-2026-62381 (MEDIUM 6.6) — luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1_add_obj (x509write.c) when signing a certificate with a 2040-bit RSA key. For a 255-byte signature, the BIT STRING allocation is computed from the DER length encoding of 255 bytes

mednvdPublished 2026-08-22

CVE-2026-62381 CVSS: 6.6 MEDIUM Published: 2026-08-22T13:16:39.957

luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1_add_obj (x509write.c) when signing a certificate with a 2040-bit RSA key. For a 255-byte signature, the BIT STRING allocation is computed from the DER length encoding of 255 bytes, but the payload written after prepending the unuse

Indicators of compromise

CVE-2026-62381cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-62381