CVE-2026-82520

Received Received - Intake

Memory Exhaustion via Gzip/ZIP in parsedmarc

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description

parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a highly compressed attachment to the monitored mailbox, causing the parsedmarc process to allocate memory proportional to the uncompressed size and exhaust available RAM.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-82520

Affected Vendors & Products

Vendor	Product	Version / Range
parsedmarc	parsedmarc	to 11.0.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-409	The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.

Attack-Flow Graph

Executive Summary

parsedmarc before version 11.0.1 has a flaw where it decompresses gzip and ZIP attachments without size limits. An attacker can send a crafted email with a highly compressed attachment to trigger excessive memory allocation, leading to RAM exhaustion.

Detection Guidance

This vulnerability can be detected by monitoring for excessive memory usage by the parsedmarc process when processing emails with attachments. Check for processes consuming unusually high RAM or system slowdowns during email processing.

Impact Analysis

This vulnerability can cause system crashes or slowdowns due to memory exhaustion. If parsedmarc runs on a server processing many emails, it may lead to service disruptions or downtime.

Mitigation Strategies

Upgrade parsedmarc to version 11.0.1 or later to address the decompression issue. Additionally, implement email attachment size limits and monitor for suspicious emails with highly compressed attachments.

Hi! I’m here to help you understand CVE-2026-82520. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70