Denial of Service in pyasn1 Python Library

CVE-2026-23490

What is CVE-2026-23490?

The pyasn1 library, a widely used ASN.1 handling library for Python, has a vulnerability that can be exploited to cause memory exhaustion. This issue arises from the processing of malformed RELATIVE-OID inputs that contain an excessive number of continuation octets. This can lead to Denial of Service conditions, severely affecting applications that rely on this library for ASN.1 operations. The vulnerability has been addressed in version 0.6.2, where the memory handling for these malformed inputs was significantly improved.

References