Memory Exhaustion Vulnerability in Perl MIME::Parser by DSKOLL

CVE-2026-116267

What is CVE-2026-116267?

The MIME::Parser in Perl versions prior to 5.521 is susceptible to a memory exhaustion issue caused by deeply nested messages without proper closure. When a message is improperly terminated, the parser logs errors at each nesting level, leading to a dramatic increase in memory consumption as the diagnostic logs grow quadratically with the depth of nesting. The default configuration does not impose a limit on how deeply a message can be nested, which exacerbates the potential for excessive memory usage.

References