CVE-2026-75758

A flaw was found in the Elixir standard library. An attacker who controls a list can trigger an uncontrolled recursion vulnerability by passing a specially crafted list to functions like inspect/1, List.tostring/1, or List.tocharlist/1. This leads to the exhaustion of a BEAM node's memory,...

CVE-2026-75758: Uncontrolled Recursion

Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 to exhaust a BEAM node's memory. Inspect.List's charlist branch in lib/elixir/lib/inspect.ex classifies a list as a charlist using...