Live › vulnerability › CVE-2026-119197
pyasn1, a Python ASN.1 library, decodes binary REAL values with quadratic time in mantissa length. A crafted encoded value sent to a BER, CER or DER decoder can hold a worker on one CPU core for seconds or longer, causing denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 20:26 UTC. All times on this page are UTC.
Applications that run pyasn1 to decode ASN.1 data from untrusted sources, such as certificates, SNMP or LDAP messages, are exposed. Code that only decodes data it generates itself, or that does not use pyasn1, can skip it.
No product ranges from the sources yet.
pip show pyasn1 to read the installed versionpyasn1 to find pinned versions0.6.5 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, or DER decode(), with or without a schema containing REAL. RealPayloadDecoder.valueDecoder repeatedly performs a left shift, OR, and suffix copy for every mantissa octet, making decode time quadratic in mantissa length. A comparatively small REAL value can hold a decoding worker on one CPU core for seconds or longer and cause availability loss. This issue is fixed in version 0.6.5.
This page as .md · .json · in your agent: get_signal("CVE-2026-119197")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.