CVE-2026-107373criticalCWE-125

CVE-2026-107373: falha crítica em ExtUtils-Typemaps-Default

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ExtUtils-Typemaps-Default+ Monitorar libextutils-typemaps-default-perl

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.1epss 0.4%
ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string( SvPV_nolen($arg), SvCUR($arg) ) However, evaluation order for C++ arguments is not specified, and some compilers may produce code that evalutes SvCUR($arg) first. When $arg is not a string (for example, an interger, number or a reference) then SvCUR will return an invalid value, and the program may abort or segfault.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Produtos afetados
ExtUtils-Typemaps-Default
CVEs relacionadas — ExtUtils-Typemaps-Default

No mesmo produto, das mais perigosas para as menos.

CVE-2013-10076HIGHExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty listEPSS 0.4%CVE-2026-107794HIGHExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty listEPSS 0.4%