XML::Bare versions through 0.53 for Perl have an unbounded character lookahead.

The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offsets are within the buffer.

Truncated strings such as "<a/" can trigger an out-of-bounds read.

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead.

The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offsets are within the buffer.

Truncated strings such as "<a/" can trigger an out-of-bounds read.

perl-XML-Bare-0.53-7.1 on GA media

Affected: Ubuntu:16.04:LTS: libxml-bare-perl, Ubuntu:18.04:LTS: libxml-bare-perl, Ubuntu:20.04:LTS: libxml-bare-perl, Ubuntu:22.04:LTS: libxml-bare-perl, Ubuntu:24.04:LTS: libxml-bare-perl, Ubuntu:26.04:LTS: libxml-bare-perl

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offsets are within the buffer. Truncated strings such as "<a/" can trigger an out-of-bounds read.