Threats tagged 'brew-smbclient-ng-cve-2026-119196'

CVE-2026-119196 is a high-severity vulnerability in pyasn1 (up to version 0.6.4) used by smbclient-ng (>=3.1.0). It causes quadratic CPU consumption when decoding constructed BIT STRING values with many fragments, leading to potential denial of service via CPU exhaustion. This occurs because the decoder repeatedly shifts and copies the accumulated value for each fragment. The vulnerability affects BER and CER decoders and certain schema-driven DER decoding paths. No confidentiality or integrity impact is reported.