CVE-2026-10832

Name of the Vulnerable Software and Affected Versions wildfly-elytron-asn1 (affected versions not specified)

Description A resource exhaustion flaw exists in the DERDecoder class. A remote attacker can trigger a Denial of Service (DoS) by sending a specially crafted DER (Distinguished Encoding Rules) payload. The issue occurs because the decoder allocates excessive memory based on an inflated length value without proper validation, leading to Java Virtual Machine (JVM) memory exhaustion. This affects services processing untrusted DER/ASN.1 input, such as X.500 certificate principal parsing paths and SASL (Simple Authentication and Security Layer) authentication mechanisms.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.