Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

ExtUtils-ParseXS

cpan

converts Perl XS code into C code

View on github.com · View on metacpan.org

Security Advisories for ExtUtils-ParseXS in cpan

Potential
Moderate
15 days ago

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass. CPANSA-perl-2026-19487

cpan perl
Potential
Moderate
19 days ago

Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch. CPANSA-perl-2026-15534

cpan perl
Potential
about 2 months ago

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When such branches are combined into a trie, the delta between... CPANSA-perl-2026-13221

cpan perl
Potential
about 2 months ago

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large re... CPANSA-perl-2026-57432

cpan perl
Potential
about 2 months ago

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I3... CPANSA-Storable-2026-57433

cpan Storable
Potential
2 months ago

Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiad... CPANSA-Socket-2026-12087

cpan Socket
Potential
3 months ago

Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than b... CPANSA-perl-2026-8376

cpan perl
Potential
4 months ago

Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could ... CPANSA-Storable-2017-20230

cpan Storable
Potential
5 months ago

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib. Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable... CPANSA-Compress-Raw-Zlib-2026-4176

cpan Compress-Raw-Zlib
Potential
5 months ago

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib. Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable... CPANSA-perl-2026-4176

cpan perl
Potential
about 1 year ago

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle ... CPANSA-perl-2025-40909

cpan perl
Potential
over 1 year ago

A heap buffer overflow vulnerability was discovered in Perl. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`. $ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}... CPANSA-perl-2024-56406

cpan perl
Potential
about 3 years ago

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation. CPANSA-perl-2022-48522

cpan perl
Potential
over 3 years ago

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0. CPANSA-perl-2023-47100

cpan perl
Potential
about 5 years ago

Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in the current working directory) that preempts dynamic module loading. Exploitation requires an unusual configurati... CPANSA-Encode-2021-01

cpan Encode
Potential
High
about 6 years ago

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. CPANSA-perl-2020-10543

cpan perl
Potential
High
about 6 years ago

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection. CPANSA-perl-2020-10878

cpan perl
Potential
High
about 6 years ago

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls. CPANSA-perl-2020-12723

cpan perl
Potential
Critical
over 7 years ago

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. CPANSA-perl-2018-18311

cpan perl
Potential
Critical
over 7 years ago

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory. CPANSA-perl-2018-18313

cpan perl
Potential
Critical
over 7 years ago

Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations. CPANSA-perl-2018-18314

cpan perl
Potential
Critical
over 8 years ago

Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count. CPANSA-perl-2018-6913

cpan perl
Potential
High
over 8 years ago

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure. CPANSA-perl-2018-6798

cpan perl
Potential
Critical
almost 9 years ago

Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable. CPANSA-perl-2017-12814

cpan perl
Potential
High
almost 9 years ago

Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the... CPANSA-perl-2017-12837

cpan perl
Potential
Critical
almost 9 years ago

Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expre... CPANSA-perl-2017-12883

cpan perl
Potential
Critical
over 9 years ago

The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument. CPANSA-perl-2015-8608

cpan perl
Potential
High
about 10 years ago

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory. CPANSA-perl-2016-6185

cpan perl
High
about 10 years ago

(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/... CPANSA-ExtUtils-ParseXS-2016-1238

cpan ExtUtils-ParseXS

Filter by Severity

High 7 Critical 7 Moderate 2