Threats tagged 'brew-gyb-cve-2026-119195'

pyasn1 versions 0.6.4 and earlier contain a denial-of-service vulnerability due to quadratic-time complexity in decoding constructed OCTET STRINGs, character strings, and indefinite-length ANY types. This occurs when decoding many fixed-size fragments, causing excessive CPU usage. The issue affects BER and CER decoding and certain non-conforming DER inputs. An attacker supplying crafted ASN.1 input to an affected decoder can cause CPU exhaustion. No confidentiality or integrity impact is reported.