CVE-2026-128238

Scapy before 2.8.0 contains an uncontrolled recursion vulnerability in the BER/ASN.1 decoder in scapy/asn1/ber.py that allows unauthenticated remote attackers to crash parsing applications. Attackers can send a single 833-byte packet with 250 nested ASN.1 SEQUENCE structures to trigger an unhandl...

EUVD-2026-125054

Scapy before 2.8.0 contains an uncontrolled recursion vulnerability in the BER/ASN.1 decoder in scapy/asn1/ber.py that allows unauthenticated remote attackers to crash parsing applications. Attackers can send a single 833-byte packet with 250 nested ASN.1 SEQUENCE structures to trigger an unhandl...

CVE-2026-128238

Scapy versions before 2.8.0 are vulnerable to an uncontrolled recursion vulnerability within the BER/ASN.1 decoder located in scapy/asn1/ber.py. An unauthenticated remote attacker can cause an application to crash by sending a single 833-byte packet containing 250 nested ASN.1 SEQUENCE structures...