CVE-2026-35189

A vulnerability exists in OpenSSL where a certificate containing numerous nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth during a TLS handshake. When OpenSSL caches these X.509 extensions, it can allocate hundreds of MiB of resident memory from a certificate u...

UBUNTU-CVE-2026-35189

Excessive Memory Allocation in Relative CRLDP Processing...

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...