Resource exhaustion in Erlang Otp

CVE-2026-59251

Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During…

Affected products

  • Erlang Otp — versions 1.15, 26.2, 9d1dda7bad5a64b58c10a1554751689e94131a73

Weakness classification (CWE)

References