CVE-2026-59886

Name of the Vulnerable Software and Affected Versions pyasn1 versions prior to 0.6.4

Description The univ.Real type converts its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value containing a very large exponent can cause float conversion to consume excessive CPU and memory, potentially hanging applications that decode untrusted ASN.1 data. This occurs during operations such as prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call.

Recommendations Update pyasn1 to version 0.6.4.