CVE Catalog
CVE-2026-39820
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk0.78%
54th percentile - higher than 54% of all known CVEs
Summary
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate functions can trigger excessive CPU exhaustion and memory allocations.
Risk Assessment
The risk for the organization is the possibility of a DoS attack through resource exhaustion, which could lead to service unavailability.
Recommendation
It is recommended to implement limits on input complexity and update the library to a version containing the fix.
Other vulnerabilities in Email parsing library
Original NVD description (English source)
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.