PUBLISHED
2026-05-26 00:16
MODIFIED
2026-05-26 04:16
EPSS (Prob. Exploit)
0.49%
Top 58.1%
> DESCRIPTION
Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.
Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer.
A caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-680: Integer Overflow to Buffer Overflow - The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds
AFFECTED PACKAGES:
Unknown / Unknown
231 versions affected
> HISTORIQUE DES MODIFICATIONS
Première apparition
26/05/2026 00:16
Source: NVD
📊
ENRICHISSEMENT
01/06/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-680: Integer Overflow to Buffer Overflow - The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated th...
Total des modifications: 1
Dernière mise à jour: 5 months ago