AZL-111539 CVE-2026-119197 affecting package python-pyasn1 0.4.8-3

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, ...

CVE-2026-119197

The pyasn1 Python ASN.1 library is vulnerable to a denial of service (DoS) via quadratic-complexity decoding in its binary REAL decoding logic. In versions prior to 0.6.5 , the RealPayloadDecoder.valueDecoder repeatedly performs a left shift, OR, and suffix copy for every mantissa octet. An attac...

PT-2026-132816

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, ...