Uncontrolled Recursion in Elixir Standard Library Affects Multiple Versions

CVE-2026-75758

What is CVE-2026-75758?

An Uncontrolled Recursion vulnerability exists in the Elixir standard library, where an attacker can exploit lists passed to certain functions like inspect/1, List.to_string/1, or List.to_charlist/1, leading to memory exhaustion on a BEAM node. The vulnerability arises from incorrect list classification within the inspect function, which can cause excessive recursion and eventually crash the process when the maximum heap size is reached. This issue affects specific versions of Elixir, prompting the need for immediate awareness and remediation.

References