CVE-2026-33818: Enforce maximum recursion depth in encoding/asn1

Published Aug 13, 2026

Updated

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

Affected Software

1 affected component

encoding/asn1

Aug 13, 2026

CVE Published

via MITRE·09:58 PM

Data Sourced

via MITRE·09:58 PM

DescriptionWeakness

CVE-2026-33818 has a risk rating of 37, indicating moderate severity.

To fix CVE-2026-33818, enforce a maximum recursion depth limit within the Unmarshal function.

CVE-2026-33818 affects the encoding/asn1 package in Go.

CVE-2026-33818 was published on August 13, 2026.

CVE-2026-33818 addresses stack exhaustion caused by parsing deeply-nested, recursive structures.