Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

Perl CryptX before version 0.087 includes an outdated cryptography library (libtommath) with a flaw that can cause integer overflow, potentially allowing attackers to crash the application or execute malicious code.

CryptX versions prior to 0.087 embed a vulnerable version of libtommath susceptible to integer overflow (CVE-2023-36328), exploitable through crafted mathematical inputs during cryptographic operations. This can result in memory corruption, denial of service, or arbitrary code execution depending on the context of use.