Threats tagged 'brew-magic-wormhole-cve-2026-115778'

An unauthenticated remote denial of service vulnerability exists in the Twisted conch telnet transport. The flaw allows a remote attacker to send a telnet subnegotiation sequence without a terminating byte, causing an unbounded memory allocation in a per-connection buffer. This buffer grows indefinitely until the process is terminated by the operating system due to memory exhaustion. The vulnerability affects Twisted version 26.4.0 and later versions including >=0.9.2 of the related product. There is no impact on confidentiality or integrity, and no code execution is possible.