CVE-2012-2110

CVE-2012-2110 is a buffer overflow vulnerability in the asn1_d2i_read_bio function of OpenSSL versions prior to 0.9.8v, 1.0.0i, and 1.0.1a. This flaw allows remote attackers to cause a denial of service (memory corruption) or potentially other impacts by providing crafted DER data, such as in an X.509 certificate or RSA public key. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, enabling potential compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, public exploit code exists on ExploitDB, though there is minimal community discussion or media coverage surrounding this decade-old vulnerability.