The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 05 Nov 2025 07:30:00 +0900

Type Values Removed Values Added
References

Tue, 04 Nov 2025 00:15:00 +0900

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}

cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


Sat, 01 Nov 2025 09:15:00 +0900

Type Values Removed Values Added
Weaknesses CWE-770
References
Metrics threat_severity

None

threat_severity

Moderate


Fri, 31 Oct 2025 06:15:00 +0900

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 30 Oct 2025 23:45:00 +0900

Type Values Removed Values Added
First Time appeared Golang
Golang encoding
Vendors & Products Golang
Golang encoding

Thu, 30 Oct 2025 07:30:00 +0900

Type Values Removed Values Added
Description The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.
Title Quadratic complexity when parsing some invalid inputs in encoding/pem
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Go

Published:

Updated: 2025-11-04T21:14:02.531Z

Reserved: 2025-09-30T15:05:03.604Z

Link: CVE-2025-61723

cve-icon Vulnrichment

Updated: 2025-11-04T21:14:02.531Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-29T23:16:19.927

Modified: 2025-11-04T22:16:36.420

Link: CVE-2025-61723

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-10-29T22:10:13Z

Links: CVE-2025-61723 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-30T23:37:34Z

Weaknesses