Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-61723

Quadratic complexity when parsing some invalid inputs in encoding/pem

Description

The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Go standard library encoding/pem

Default version status: unaffected

  • 0 to < 1.24.8affected
  • 1.25.0 to < 1.25.2affected

References