CVE-2026-27452

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27452", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-19T17:25:31.100Z", "datePublished": "2026-02-21T06:50:35.877Z", "dateUpdated": "2026-02-24T18:54:48.702Z"}, "containers": {"cna": {"title": "ASN.1 TypeScript Library: Decoding an INTEGER could leak the underlying ArrayBuffer", "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "lang": "en", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 9.2, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/JonathanWilbur/asn1-ts/security/advisories/GHSA-h5rw-vxjr-8q79", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/JonathanWilbur/asn1-ts/security/advisories/GHSA-h5rw-vxjr-8q79"}], "affected": [{"vendor": "JonathanWilbur", "product": "asn1-ts", "versions": [{"version": "<= 11.0.5", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-21T06:50:35.877Z"}, "descriptions": [{"lang": "en", "value": "ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In versions 11.0.5 and below, in some cases, decoding an INTEGER could leak the underlying ArrayBuffer. This issue is expected to be fixed in version 11.0.6."}], "source": {"advisory": "GHSA-h5rw-vxjr-8q79", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-24T18:54:32.778570Z", "id": "CVE-2026-27452", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-24T18:54:48.702Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-27452", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-24T18:54:32.778570Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-24T18:54:41.271Z"}}], "cna": {"title": "ASN.1 TypeScript Library: Decoding an INTEGER could leak the underlying ArrayBuffer", "source": {"advisory": "GHSA-h5rw-vxjr-8q79", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 9.2, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH"}}], "affected": [{"vendor": "JonathanWilbur", "product": "asn1-ts", "versions": [{"status": "affected", "version": "<= 11.0.5"}]}], "references": [{"url": "https://github.com/JonathanWilbur/asn1-ts/security/advisories/GHSA-h5rw-vxjr-8q79", "name": "https://github.com/JonathanWilbur/asn1-ts/security/advisories/GHSA-h5rw-vxjr-8q79", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In versions 11.0.5 and below, in some cases, decoding an INTEGER could leak the underlying ArrayBuffer. This issue is expected to be fixed in version 11.0.6."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-21T06:50:35.877Z"}}}, "cveMetadata": {"cveId": "CVE-2026-27452", "state": "PUBLISHED", "dateUpdated": "2026-02-24T18:54:48.702Z", "dateReserved": "2026-02-19T17:25:31.100Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-02-21T06:50:35.877Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "asn1-ts", "vendor": "JonathanWilbur", "versions": [{"status": "affected", "version": "<= 11.0.5"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:jonathanwilbur:asn1-ts:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "7E273ECF-B5F7-4CF5-AF6C-ECFDBD2FA39C", "versionEndExcluding": "11.0.6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In versions 11.0.5 and below, in some cases, decoding an INTEGER could leak the underlying ArrayBuffer. This issue is expected to be fixed in version 11.0.6."}, {"lang": "es", "value": "Biblioteca ESM de TypeScript para ASN.1, incluyendo c\u00f3decs para las Reglas B\u00e1sicas de Codificaci\u00f3n (BER) y las Reglas de Codificaci\u00f3n Distinguida (DER). En las versiones 11.0.5 e inferiores, en algunos casos, la decodificaci\u00f3n de un INTEGER podr\u00eda filtrar el ArrayBuffer subyacente. Se espera que este problema se solucione en la versi\u00f3n 11.0.6."}], "id": "CVE-2026-27452", "lastModified": "2026-06-17T10:27:10.793", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.2, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-27452", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-24T18:54:32.778570Z", "version": "2.0.3"}}]}, "published": "2026-02-21T07:16:13.210", "references": [{"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/JonathanWilbur/asn1-ts/security/advisories/GHSA-h5rw-vxjr-8q79"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,11.0.5]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "asn1-ts", "source": "cna", "vendor": "JonathanWilbur"}, "product": "asn1-ts", "vendor": "jonathanwilbur"}], "analysis": {"en": {"generated_at": "2026-04-17T16:51:22.521905+00:00", "value": {"mitigation_remediation": ["Upgrade the asn1-ts library to version 11.0.6 or later to remove the Integer decoding leak.", "Where an upgrade is not immediately possible, limit the source of ASN.1 data to trusted inputs and validate the data before decoding to prevent malicious values from reaching the decoder.", "Implement a temporary code change that ensures the function returns a copy of the decoded value rather than the original ArrayBuffer, if a patch cannot be applied at this time."], "summary": {"action": "Apply Patch", "impact": "Data Exposure"}, "threat_synthesis": {"affected_systems": "CVE-2026-27452 affects the asn1-ts library distributed by Jonathan Wilbur, specifically all releases version 11.0.5 and earlier. Upgrades to version 11.0.6 and subsequent releases contain the patch that mitigates the vulnerability.", "description_and_impact": "ASN.1 TypeScript ESM library, which provides BER and DER codecs, contains a flaw in versions 11.0.5 and earlier where decoding an INTEGER can expose the underlying ArrayBuffer. This leak can expose arbitrary internal data such as cryptographic keys or sensitive configuration stored within the buffer, leading to information disclosure. The weakness is identified as CWE-200, indicating an information exposure vulnerability.", "risk_and_exploitability": "With a CVSS score of 9.2, CVE-2026-27452 is considered high severity, and although the EPSS score is below 1% indicating a low current exploitation probability, the vulnerability is not listed in the CISA KEV catalog. The flaw is local; an attacker who can supply crafted ASN.1 data to the decoding routine can trigger the leak. The likely attack vector is via an application that processes ASN.1 data from untrusted sources. This can lead to data exposure. The fix is straightforward via upgrading to 11.0.6, and no public exploit exploits have been documented. Given its local nature and low exploitation probability, monitoring and remediation remain priority actions."}}}}, "created": "2026-02-23T14:32:28.699645+00:00", "updated": "2026-04-17T17:00:10.174093+00:00", "vendors": ["jonathanwilbur", "jonathanwilbur$PRODUCT$asn1-ts"]}