CVE-2026-42504 — Quadratic complexity in WordDecoder.DecodeHeader in mime

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Published: 2026-06-02 · CVSS: 7.5 · CVSS 3.1

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision b34e95c7b4f73499838a4238426598b58dd634fb