CVE-2026-119196

The pyasn1 Python library (prior to version 0.6.5 ) is vulnerable to a quadratic CPU consumption issue during constructed BIT STRING decoding . The BitStringPayloadDecoder repeatedly calls BitString.fromOctetString, shifting and copying an ever-growing SizedInteger for each fragment in BER , CER ...