CVE-2025-13151 is a stack-based buffer overflow vulnerability in the libtasn1 library, specifically in the asn1_expend_octet_string function. The issue arises from a failure to properly validate the size of input data, allowing a remote attacker to trigger a denial of service by crashing applications that use libtasn1. Red Hat has classified this vulnerability as low severity and notes that no suitable mitigation or fix currently meets their standards for deployment. The vulnerability affects Red Hat Hardened Images RPMs including libtasn1 versions 4.21.0-1.1.hum1 for aarch64 and x86_64 architectures.

Successful exploitation results in a denial of service condition, causing affected applications or systems to crash or become unavailable. There is no indication from the vendor advisory that confidentiality or integrity is impacted. The vulnerability does not require authentication and can be triggered remotely. No known exploits are reported in the wild.

Red Hat states that no mitigation is currently available or meets their criteria for ease of use, applicability, and stability. Users should monitor Red Hat advisories for future updates or fixes. Until a fix is released, affected systems remain vulnerable to denial of service attacks via this flaw.