CVE-2026-9265 PUBLISHED

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path

Assigner: CPANSec
Reserved: 22.05.2026 Published: 20.06.2026 Updated: 20.06.2026

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path.

print_attribute() copies a UTF8STRING ASN.1 attribute value into a heap buffer sized exactly to its declared length via strncpy, leaving no NUL terminator. Downstream callers run strlen() on the result and pass the inflated length to newSVpvn(), copying attacker-influenced adjacent heap bytes into a Perl scalar.

Product Status

Vendor JONASBN
Product Crypt::OpenSSL::PKCS12
Versions Default: unaffected
  • affected from 0 to 1.96 (excl.)

Solutions

Upgrade to version 1.96 or apply the linked patch.

References

Problem Types

  • CWE-125 Out-of-bounds Read CWE