CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers
No sign of exploitation. No public exploitation artifact known so far.
CryptX library for Perl has a vulnerability where certain decryption functions copy authentication tags into a buffer without checking their size, allowing attackers to overflow the stack and potentially crash the application or execute malicious code.
CWE-121 stack buffer overflow in AEAD decrypt_verify helpers (gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify, eax_decrypt_verify) due to unchecked copying of caller-supplied authentication tags exceeding 144 bytes into a fixed-size stack buffer. Exploitation requires ability to supply oversized tags to affected decryption routines; impact includes stack corruption, denial of service, and potential code execution.