CVE-2026-107373 | BDVDB-2026-385491 Detail

Description#

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string( SvPV_nolen($arg), SvCUR($arg) ) However, evaluation order for C++ arguments is not specified, and some compilers may produce code that evalutes SvCUR($arg) first. When $arg is not a string (for example, an interger, number or a reference) then SvCUR will return an invalid value, and the program may abort or segfault.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-10-10Record published in the CVE List.
2. Version 22026-10-16Most recent update recorded in the CVE List.