CVE-2026-116273

CVE-2026-116273 · MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The max_parts option defaulted to -1, which disables the limit, so a parser created with default settings builds an entity for every part however many a message has. Version 5.521 sets max_parts to 1000 and max_depth to 64 by default. Setting either to -1 still removes the limit.

EPSS 0,2%

Publication

2026-10-28T17:34:44.660Z

Mise à jour

2026-10-28T17:34:44.660Z

Pile logicielle: system

Vérifiez votre serveur →