CVE-2012-2131

CVE-2012-2131 describes multiple integer signedness errors in OpenSSL versions 0.9.8v and earlier, specifically within the crypto/buffer/buffer.c component. This flaw allows remote attackers to trigger buffer overflows and memory corruption, potentially leading to denial of service or other unspecified impacts, through specially crafted DER data such as X.509 certificates or RSA public keys. The vulnerability carries a CVSS score of 7.5, indicating high severity with a network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While not listed on the KEV catalog and with no reported active exploitation, public exploit code (EDB-18756) exists, though there is minimal community discussion or media coverage surrounding this decade-old vulnerability.