Most recent entries from all

bdu:2026-15368

certfr-2026-avi-1249 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2026-avi-1249

EUVD-2026-365375

fkie_cve-2026-57432

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.

S_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.

A template derived from untrusted input can read heap memory past the buffer and return it to the caller.

GHSA-5g35-5jrj-f39p

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.

A template derived from untrusted input can read heap memory past the buffer and return it to the caller.

msrc_CVE-2026-57432 — Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pac…

msrc_CVE-2026-57432

OESA-2026-3224 — perl security update

Affected: openEuler:20.03-LTS-SP4: perl, openEuler:22.03-LTS-SP4: perl, openEuler:24.03-LTS-SP1: perl, openEuler:24.03-LTS-SP3: perl, openEuler:24.03-LTS-SP4: perl

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fix(es):

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.

A template derived from untrusted input can read heap memory past the buffer and return it to the caller.(CVE-2026-57432)

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record.

retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value.

A crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.(CVE-2026-57433)

openSUSE-SU-2026:21411-1 — Security update for perl

Security update for perl

RHSA-2026:39997 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

perl: Perl: Incorrect regular expression processing via large regular expressions perl: Perl: Information disclosure via integer overflow in pack/unpack operations

SUSE-SU-2026:22847-1 — Security update for perl

Security update for perl

UBUNTU-CVE-2026-57432

Affected: Ubuntu:Pro:14.04:LTS: perl, Ubuntu:Pro:16.04:LTS: perl, Ubuntu:Pro:18.04:LTS: perl, Ubuntu:Pro:20.04:LTS: perl, Ubuntu:22.04:LTS: perl, Ubuntu:24.04:LTS: perl, Ubuntu:26.04:LTS: perl

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds. A template derived from untrusted input can read heap memory past the buffer and return it to the caller.

WID-SEC-W-2026-2309 — Perl: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Perl ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.