CVE-2026-59251

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

CVE-2026-59251 Denial of service via exponential certificate policy tree growth in path validation

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

CVE-2026-59251

Summary: CVE-2026-59251 is a denial-of-service in Erlang/OTP public_key certificate path validation caused by unbounded growth of the certificate policy tree during RFC 5280 policy processing. The vulnerability occurs when validating TLS certificates; a chain with many policies per certificate ca...

EUVD-2026-49325

Allocation of resources without limits in Erlang/OTP publickey certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in publickey:pkixpathvalidation/3...

PT-2026-64994

Allocation of resources without limits in Erlang/OTP public key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in public key:pkix path...