Skip to content

CVE-2026-57432 on CTRL-OS 26.05

Aliases: CVE-2026-57432

Packages: perl

Status: Plausible

Advisory Information

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.

S_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.

A template derived from untrusted input can read heap memory past the buffer and return it to the caller.

Updates

2026-07-14 15:59 CEST

Metadata changes:

  • Status for package perl: “Plausible”

(Amended on: 2026-07-14 19:46 CEST)

2026-07-14 15:57 CEST

Metadata changes:

  • Status for package perl: “New”

(Amended on: 2026-07-14 15:58 CEST)