CVE-2011-2939

MEDIUM · CVSS 5.1 EPSS 2.65%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-01-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2011-2939

Severity

MEDIUM

CVSS

5.1

EPSS

2.65%

Original NVD Description

Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.