The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.
Metrics
Affected Vendors & Products
References
History
Sat, 01 Nov 2025 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-770 | |
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
Thu, 30 Oct 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Thu, 30 Oct 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Golang
Golang encoding |
|
| Vendors & Products |
Golang
Golang encoding |
Wed, 29 Oct 2025 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs. | |
| Title | Quadratic complexity when parsing some invalid inputs in encoding/pem | |
| References |
|
Status: PUBLISHED
Assigner: Go
Published: 2025-10-29T22:10:13.220Z
Updated: 2025-10-30T20:35:37.926Z
Reserved: 2025-09-30T15:05:03.604Z
Link: CVE-2025-61723
Updated: 2025-10-30T20:35:32.603Z
Status : Awaiting Analysis
Published: 2025-10-29T23:16:19.927
Modified: 2025-10-30T21:15:37.053
Link: CVE-2025-61723