CVE-2025-40912
CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode
In short
CryptX for Perl before version 0.065 includes a vulnerable version of the tomcrypt library that fails to properly handle malformed unicode characters, potentially allowing attackers to cause crashes or unexpected behavior.
Technical detail
CryptX embeds an outdated tomcrypt library (vulnerable to CVE-2019-17362) that improperly processes malformed unicode input. An attacker can supply crafted unicode sequences to trigger denial of service or undefined behavior in cryptographic operations. Update to version 0.065 or later to remediate.
Summary generated and translated by AI from the official description.
CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode.
CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
MIK · CryptXWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →