CVE-2026-82520 – parsedmarc < 11.0.1 Zip Bomb DoS via Compressed Email Attachments

​CVE ID :CVE-2026-82520

Published : Sept. 3, 2026, 8:39 p.m. | 22 minutes ago

Description :parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a highly compressed attachment to the monitored mailbox, causing the parsedmarc process to allocate memory proportional to the uncompressed size and exhaust available RAM.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More