CVE-2026-56810

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-56810
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-56810.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-56810
Aliases
Published
2026-07-06T09:17:17.429Z
Modified
2026-07-15T01:49:05.485344815Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5
Details

Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint (Mint.HTTP1 module) allows a denial of service via an oversized chunked transfer-encoded response.

This vulnerability is associated with program files lib/mint/http1.ex and program routines 'Elixir.Mint.HTTP1':decodebody/5, 'Elixir.Mint.HTTP1':addbodytobuffer/2.

When Mint decodes a chunked HTTP response body, it accumulates each partial fragment of the current chunk in the connection's databuffer (an unbounded iolist) via addbodytobuffer/2 and does not emit the data to the caller until the full declared chunk length has been received. The chunk size is taken directly from the server and parsed with no upper bound, so a malicious or compromised server can announce one enormous chunk (for example a size line of 7FFFFFFF, about 2 GiB) and then send the body bytes slowly without ever completing the chunk. The client buffers every received byte while it waits for a completion that never arrives, and because no data responses are produced until the chunk finishes, a caller that otherwise streams large content-length bodies safely gains no protection. An unauthenticated remote server (reachable whenever a client follows redirects, fetches user-supplied URLs, or processes webhooks) can drive the client's memory arbitrarily high and trigger an out-of-memory condition.

This issue affects mint: from 0.5.0 before 1.9.1.

Database specific 
{
    "cwe_ids": [
        "CWE-770"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56810.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "c575d819d39ebf7e9b77ec24584a5ffbb11c844e"
                },
                {
                    "fixed": "193ce714907d16e8adc4ab3c40e4f0c2f045b2a6"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "EEF"
}
References

Affected packages

Git / github.com/elixir-mint/mint

Affected ranges

Type
GIT
Repo
https://github.com/elixir-mint/mint
Events
Introduced
d135bbdcfcec041fa3a9b22a3b6f4546e84f4f7b
Fixed
bc92a3a4c003dbdc71e8ab3f58929fcfc61153cf
Fixed
193ce714907d16e8adc4ab3c40e4f0c2f045b2a6
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0.5.0"
        },
        {
            "fixed": "1.9.1"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

v0.*
v0.5.0
v1.*
v1.0.0
v1.1.0
v1.2.0
v1.2.1
v1.3.0
v1.4.0
v1.4.1
v1.4.2
v1.5.0
v1.5.1
v1.5.2
v1.6.0
v1.6.1
v1.6.2
v1.7.0
v1.7.1
v1.8.0
v1.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-56810.json"