Threats tagged 'brew-dvc-cve-2026-119195'

pyasn1 versions up to 0.6.4 have a quadratic-time denial of service vulnerability in decoding constructed OCTET STRINGs, constructed character strings, and indefinite-length ANY types. This flaw causes excessive CPU consumption when processing many small ASN.1 fragments, potentially leading to CPU exhaustion. The issue affects BER and CER decoding and certain non-conforming DER inputs. No confidentiality or integrity impact is reported. A fix is available in version 3.67.1_19.