NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00702·Published 2023-09-13·Fixed in 0.7.3CWE-232