CVE-2026-42504
High
Quadratic complexity in WordDecoder.DecodeHeader in mime
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.
Exploit probability
0.6%
Published
June 5, 2026
Required by
Not available
Last source change
June 5, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
GO-2026-5038
View original source
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.
Open Source Vulnerabilities
BIT-golang-2026-42504
View original source
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.
05 / REFERENCES