Search/CVE-2015-3622
● CVE

CVE-2015-3622

Vendorfedoraproject, gnu, opensuseProductfedora, libtasn1, opensuseDiscoveredMay 12, 2015UpdatedMay 6, 2026

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

CVSS v3.1
—
EPSS
32.9%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 24, 2026
▼ 0.20pp
33.1% → 32.9% over 2 tracked changes
Connections
4 relationships
Timeline
disclosure → media coverage
May 12, 2015
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026