org.wildfly.security/wildfly-elytron-asn1: Unbounded Memory Allocation in WildFly Elytron ASN.1 DERDecoder via Crafted DER Payload

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

org.wildfly.security/wildfly-elytron-asn1: Unbounded Memory Allocation in WildFly Elytron ASN.1 DERDecoder via Crafted DER Payload

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

org.wildfly.security/wildfly-elytron-asn1: Unbounded Memory Allocation in WildFly Elytron ASN.1 DERDecoder via Crafted DER Payload

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

org.wildfly.security/wildfly-elytron-asn1: Unbounded Memory Allocation in WildFly Elytron ASN.1 DERDecoder via Crafted DER Payload

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

CVE-2026-10832

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

CVE-2026-10832 Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

CVE-2026-10832 Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.ancientlightstudios:quarkus-kotlin-openapi-test (>=0.0.15, <=0.7.4) +1161 more potentially affected by CVE-2026-10832 via org.wildfly.security:wildfly-elytron-asn1 (>=2.0.0.alpha1, <=2.6.10.sp1)

org.wildfly.security:wildfly-elytron-asn1 MAVEN version =2.0.0.alpha1, =0.1.0, =0.0.15, =8.13.0, =0.0.1, =0.0.1, =2.0.27, =3.0.0-beta, =4.0.0 and more Source cves: CVE-2026-10832 Source advisory: MEND:CVE-2026-10832...

ai.pipestream:module-proxy (>=0.1.1, <=0.1.3), com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (26.7.3.0) +444 more potentially affected by CVE-2026-10832 via org.wildfly.security:wildfly-elytron-asn1 (>=2.7.0.alpha1, <=2.8.5.final)

org.wildfly.security:wildfly-elytron-asn1 MAVEN version =2.7.0.alpha1, =0.1.1, =5.0.0, =4.0.1, =1.3.1, =1.3.1, =5.6.0, =5.6.0, =0.0.002-test-beta2, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.3.3 and more Source cves: CVE-2026-10832 Source advisory: MEND:CVE-2026-10832...

ai.pipestream.module:module-proxy (>=0.1.4, <=0.1.5), com.bucket4j:bucket4j_jdk17-infinispan (8.21.0) +416 more potentially affected by CVE-2026-10832 via org.wildfly.security:wildfly-elytron-asn1 (>=2.9.0.final, <=2.9.2.sp1)

org.wildfly.security:wildfly-elytron-asn1 MAVEN version =2.9.0.final, =0.1.4, =5.0.5, =5.0.5, =1.10.0, =3.7.0.alpha2, =3.7.0.alpha2, =3.7.0.beta1, =6.1.0, =4.1.0, =3.36.0, =2.10.0, =3.0.0.beta1 and more Source cves: CVE-2026-10832 Source advisory: MEND:CVE-2026-10832...

CVE-2026-10832

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

CVE-2026-10832

A resource exhaustion flaw in the DERDecoder class within wildfly-elytron-asn1 allows a remote attacker to cause JVM memory exhaustion by sending a specially crafted DER payload with an inflated length value that is allocated without proper validation. This leads to a remote Denial of Service for...

EUVD-2026-82936

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

CVE-2026-10832: Allocation of Resources Without Limits or Throttling

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

PT-2026-95390

Name of the Vulnerable Software and Affected Versions wildfly-elytron-asn1 affected versions not specified Description A resource exhaustion flaw exists in the DERDecoder class. A remote attacker can trigger a Denial of Service DoS by sending a specially crafted DER Distinguished Encoding Rules...