CVE-2026-97853

The ericmj decimal library (versions 0.1.0 before 3.1.2 ) is vulnerable to a Memory Allocation with Excessive Size Value vulnerability (CWE-789 ). The root cause is an unbounded allocation in the Decimal.round/3 function, where the cost grows based on the places argument rather than the result si...