CVE-2026-57432: CWE-190 Integer Overflow or Wraparound in SHAY perl
Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds. A template derived from untrusted input can read heap memory past the buffer and return it to the caller.
AI Analysis
Technical Summary
CVE-2026-57432 is an integer overflow vulnerability in Perl's S_measure_struct function affecting versions up to 5.43.10. The function sums item sizes multiplied by repeat counts without checking for overflow, allowing a large repeat count to wrap the signed total negative. This negative length bypasses signed length checks in position codes (@, X, x), causing the buffer pointer to advance out of bounds and enabling out-of-bounds heap reads. Templates derived from untrusted input can exploit this to leak heap memory contents.
Potential Impact
This vulnerability allows an attacker who can control the pack or unpack template to read heap memory beyond the allocated buffer. This could lead to information disclosure of sensitive data residing in heap memory. There is no indication of code execution or other impacts from the provided data.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid processing untrusted input with pack or unpack templates that could trigger this vulnerability.
CVE-2026-57432: CWE-190 Integer Overflow or Wraparound in SHAY perl
Description
Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds. A template derived from untrusted input can read heap memory past the buffer and return it to the caller.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-57432 is an integer overflow vulnerability in Perl's S_measure_struct function affecting versions up to 5.43.10. The function sums item sizes multiplied by repeat counts without checking for overflow, allowing a large repeat count to wrap the signed total negative. This negative length bypasses signed length checks in position codes (@, X, x), causing the buffer pointer to advance out of bounds and enabling out-of-bounds heap reads. Templates derived from untrusted input can exploit this to leak heap memory contents.
Potential Impact
This vulnerability allows an attacker who can control the pack or unpack template to read heap memory beyond the allocated buffer. This could lead to information disclosure of sensitive data residing in heap memory. There is no indication of code execution or other impacts from the provided data.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid processing untrusted input with pack or unpack templates that could trigger this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- CPANSec
- Date Reserved
- 2026-06-24T13:09:26.322Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a55134768715ace437935a7
Added to database: 07/13/2026, 16:33:11 UTC
Last enriched: 07/13/2026, 16:47:40 UTC
Last updated: 07/13/2026, 22:03:22 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.