ASN.1's primary problem is that it has been around a long time. Long before folks understood the security implications of a buffer overflow, we've been parsing

ASN.1's primary problem is that it has been around a long time. Long before folks understood the security implications of a buffer overflow, we've been parsing ASN.1. Most of the vulnerabilities stem from the basic problem of trusting length fields. Any binary encoding is going to have similar issues.