ZeroDay Findings
Sign inSign up

Findings

CVE-2026-42504

Quadratic complexity in WordDecoder.DecodeHeader in mime

Published Jun 2, 2026 · updated Oct 10, 2026

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 2, 2026 · Catalog

    Detected

    Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

  2. Oct 10, 2026 · Catalog

    Fix available

    Go stdlib 0 → 1.25.11

  3. Oct 10, 2026 · Catalog

    Updated

    Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Affected

  • Go stdlib0 → 1.25.11

Sources

References