CVE-2026-35189

A vulnerability exists in OpenSSL where a certificate containing numerous nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth during a TLS handshake. When OpenSSL caches these X.509 extensions, it can allocate hundreds of MiB of resident memory from a certificate u...