Denial of Service Vulnerability in Parsedmarc by DomainAware

CVE-2026-82520

What is CVE-2026-82520?

Parsedmarc prior to version 11.0.1 is vulnerable to a Denial of Service attack that results from an unbounded read of gzip and ZIP attachments. When processed, these attachments can lead to excessive memory allocation when an unauthenticated remote attacker sends a crafted email containing a highly compressed file. This attack can exhaust the available RAM, disrupting services reliant on parsedmarc to process DMARC report emails. As the application automatically handles incoming reports without user intervention, the risk is heightened, making it essential for users to apply the latest update to mitigate this vulnerability.

References