Text::CSV_XS before version 1.62 contains a use-after-free vulnerability triggered by registered callbacks that extend the Perl argument stack during invocation of methods like parse, print, getline, and getline_all. The module caches a pointer to the Perl argument stack, which becomes stale if the stack is reallocated due to callback activity. Consequently, the return value is written through this stale pointer into freed memory, causing the caller to receive the original Text::CSV_XS object instead of parsed data. This can cause logic errors or crashes. The vulnerability does not affect usage without registered callbacks.

Affected applications using Text::CSV_XS with registered callbacks may experience logic errors or crashes due to corrupted return values from parsing methods. This can disrupt normal operation and potentially lead to memory corruption. There is no evidence of known exploits in the wild. The impact is limited to scenarios where callbacks extend the Perl argument stack.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using registered callbacks that extend the Perl argument stack with Text::CSV_XS or upgrade to version 1.62 or later if available. If no callbacks are used, this vulnerability does not apply.