CVE-2026-119191 | Digital Bazaar Forge up to 1.4.0 Bit String Decoding asn1.fromDer memory allocation

October 29, 2026 Yanac

A vulnerability marked as problematic has been reported in Digital Bazaar Forge up to 1.4.0. Affected by this vulnerability is the function asn1.fromDer of the component Bit String Decoding. The manipulation leads to uncontrolled memory allocation.

This vulnerability is uniquely identified as CVE-2026-119191. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More