CyberRota Analysis
AI-GeneratedPerl versions up to 5.43.10 are vulnerable due to an integer overflow in the S_measure_struct function, which can lead to an out-of-bounds heap read during the pack and unpack operations. This flaw allows an attacker to exploit a crafted template derived from untrusted input, potentially exposing sensitive memory contents. Organizations using affected Perl versions, particularly those handling untrusted data, should prioritize patching to mitigate the risk of memory disclosure attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds. A template derived from untrusted input can read heap memory past the buffer and return it to the caller.
Related CVEs
Other vulnerabilities affecting the same vendor(s)