https://bugzilla.redhat.com/show_bug.cgi?id=2506204
Bug ID: 2506204
Summary: CVE-2026-57432 perl: Perl: Information disclosure via
integer overflow in pack/unpack operations
[fedora-all]
Product: Fedora
Version: rawhide
Status: NEW
Whiteboard: {"flaws": ["69eea063-736d-4167-8681-0fd8eebcfabd"]}
Component: perl
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected], [email protected],
[email protected], [email protected],
[email protected], [email protected]
Blocks: 2499729
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Perl versions through 5.43.10 have an integer overflow in S_measure_struct
leading to an out-of-bounds heap read in pack and unpack.
S_measure_struct adds each item's size times its repeat count to a running
total with no overflow check, so a large repeat count in a pack or unpack
template wraps the signed SSize_t total negative. The @, X, and x position
codes then guard their moves with a signed length comparison that passes when
the length is negative, advancing the buffer pointer out of bounds.
A template derived from untrusted input can read heap memory past the buffer
and return it to the caller.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2506204
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202506204%23c0
--
_______________________________________________
perl-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
