CVE-2026-94440 — Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.
Published: 2026-10-08 · CVSS: 7.5 · CVSS 3.1
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7