The Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder contains an inefficient algorithmic complexity flaw in the BER, PER, and JER decoding routines for OBJECT IDENTIFIER subidentifiers. Specifically, the decoder accumulates base-128 subidentifiers into an unbounded integer using a process with quadratic time complexity relative to the size of the subidentifier. This allows an attacker to craft a DER-encoded OBJECT IDENTIFIER with a very large arc (approximately 262 KB of continuation bytes), causing the decoder to consume excessive CPU time (about 13 seconds on typical hardware) during TLS handshake certificate parsing. The vulnerable code is present in OTP versions from 17.0 before 27.3.4.18, 28.5.0.7, and 29.1.1, affecting the asn1 library versions 3.0 before 5.3.4.3, 5.4.3.1, and 5.5.2. The vulnerability is exploitable remotely without authentication and affects services that parse peer TLS certificates before signature or trust chain verification.

An attacker can remotely cause a denial of service by sending a crafted OBJECT IDENTIFIER during the TLS handshake, leading to excessive CPU consumption and service disruption. This affects Erlang services that parse TLS certificates, including default TLS clients and mutual-TLS servers. There is no indication of privilege escalation, data disclosure, or code execution. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is confirmed, consider limiting the size of OBJECT IDENTIFIERs accepted during TLS handshake or applying rate limiting on TLS connections to mitigate potential denial of service. Monitor vendor channels for updates and apply patches promptly once available.