Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.
Metrics
Affected Vendors & Products
References
History
Sat, 01 Nov 2025 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-770 | |
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
Thu, 30 Oct 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Thu, 30 Oct 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Golang
Golang encoding |
|
| Vendors & Products |
Golang
Golang encoding |
Wed, 29 Oct 2025 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion. | |
| Title | Parsing DER payload can cause memory exhaustion in encoding/asn1 | |
| References |
|
Status: PUBLISHED
Assigner: Go
Published: 2025-10-29T22:10:13.682Z
Updated: 2025-10-30T14:25:43.620Z
Reserved: 2025-08-27T14:50:58.691Z
Link: CVE-2025-58185
Updated: 2025-10-30T14:25:35.301Z
Status : Awaiting Analysis
Published: 2025-10-29T23:16:19.450
Modified: 2025-10-30T15:15:39.937
Link: CVE-2025-58185