CVE-2025-30077

Impact

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits.

Affected packages

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/onosproject/onos-lib-go/issues/295
• https://github.com/advisories/GHSA-jrqj-6vq2-7r63
• https://nvd.nist.gov/vuln/detail/CVE-2025-30077
• https://github.com/onosproject/onos-lib-go/commit/55579ffad35f59a5945c7861d944cd57a3b4b3d0