A heap buffer overflow vulnerability was discovered in Perl.
Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.
When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 8, 2025 | Apr 13, 2025 |
| Debian | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Freebsd | — | Upgrade perl5.36Upgrade perl5-develUpgrade perl5.40Upgrade perl5.38 | Apr 16, 2025 | Apr 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perl-libsUpgrade perl | Jun 13, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade perl-libsUpgrade perl | Jul 21, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade perlUpgrade perl-libs | Jul 1, 2025 | Apr 13, 2025 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory10 | Sep 25, 2025 | Jun 26, 2025 |
| Oracle_linux | — | Upgrade perl-Pod-FunctionsUpgrade perl-Pod-HtmlUpgrade perl-MemoizeUpgrade perl-SelectSaverUpgrade perl-ExtUtils-MiniperlUpgrade perl-libsUpgrade perl-NEXTUpgrade perl-FileHandleUpgrade perl-ExtUtils-ConstantUpgrade perl-POSIXUpgrade perl-Config-ExtensionsUpgrade perl-GDBM_FileUpgrade perl-File-DosGlobUpgrade perl-NDBM_FileUpgrade perl-DynaLoaderUpgrade perlUpgrade perl-deprecateUpgrade perl-sortUpgrade perl-User-pwentUpgrade perl-sigtrapUpgrade perl-Tie-FileUpgrade perl-I18N-LanginfoUpgrade perl-Hash-UtilUpgrade perl-FileCacheUpgrade perl-TestUpgrade perl-overloadingUpgrade perl-localeUpgrade perl-libUpgrade perl-Locale-Maketext-SimpleUpgrade perl-I18N-LangTagsUpgrade perl-EnglishUpgrade perl-encoding-warningsUpgrade perl-docUpgrade perl-Math-ComplexUpgrade perl-Term-ReadLineUpgrade perl-AutoSplitUpgrade perl-subsUpgrade perl-phUpgrade perl-utilsUpgrade perl-Unicode-UCDUpgrade perl-ODBM_FileUpgrade perl-filetestUpgrade perl-fieldsUpgrade perl-ErrnoUpgrade perl-Devel-SelfStubberUpgrade perl-develUpgrade perl-debuggerUpgrade perl-mroUpgrade perl-Sys-HostnameUpgrade perl-Hash-Util-FieldHashUpgrade perl-IPC-Open3Upgrade perl-File-FindUpgrade perl-Term-CompleteUpgrade perl-FcntlUpgrade perl-File-CompareUpgrade perl-File-statUpgrade perl-varsUpgrade perl-Getopt-StdUpgrade perl-I18N-CollateUpgrade perl-meta-notationUpgrade perl-Attribute-HandlersUpgrade perl-SafeUpgrade perl-Search-DictUpgrade perl-Thread-SemaphoreUpgrade perl-BUpgrade perl-FindBinUpgrade perl-overloadUpgrade perl-baseUpgrade perl-interpreterUpgrade perl-vmsishUpgrade perl-BenchmarkUpgrade perl-Module-LoadedUpgrade perl-DirHandleUpgrade perl-DumpvalueUpgrade perl-libnetcfgUpgrade perl-macrosUpgrade perl-Text-AbbrevUpgrade perl-blibUpgrade perl-diagnosticsUpgrade perl-ExtUtils-EmbedUpgrade perl-Tie-MemoizeUpgrade perl-Time-PieceUpgrade perl-AutoLoaderUpgrade perl-DBM_FilterUpgrade perl-TimeUpgrade perl-autouseUpgrade perl-lessUpgrade perl-Class-StructUpgrade perl-ifUpgrade perl-IOUpgrade perl-SymbolUpgrade perl-ThreadUpgrade perl-TieUpgrade perl-Devel-PeekUpgrade perl-SelfLoaderUpgrade perl-File-BasenameUpgrade perl-NetUpgrade perl-OpcodeUpgrade perl-openUpgrade perl-File-Copy | Jul 10, 2025 | Apr 13, 2025 |
| Redhat_linux | — | Upgrade perl-IPC-Open3Upgrade perl-baseUpgrade perl-File-BasenameUpgrade perl-SymbolUpgrade perl-mroUpgrade perl-Term-ReadLineUpgrade perl-NetUpgrade perl-vmsishUpgrade perl-filetestUpgrade perl-Unicode-UCDUpgrade perl-Devel-Peek-debuginfoUpgrade perl-User-pwentUpgrade perl-FcntlUpgrade perl-ifUpgrade perl-interpreter-debuginfoUpgrade perl-MemoizeUpgrade perl-diagnosticsUpgrade perl-Tie-FileUpgrade perl-Hash-Util-FieldHashUpgrade perl-Tie-MemoizeUpgrade perl-BenchmarkUpgrade perl-File-statUpgrade perl-Module-LoadedUpgrade perl-Getopt-StdUpgrade perl-ExtUtils-ConstantUpgrade perl-TimeUpgrade perl-Pod-HtmlUpgrade perl-meta-notationUpgrade perl-localeUpgrade perl-ThreadUpgrade perl-mro-debuginfoUpgrade perl-ODBM_FileUpgrade perl-macrosUpgrade perl-Hash-Util-debuginfoUpgrade perl-EnglishUpgrade perl-SafeUpgrade perl-FileHandleUpgrade perl-TieUpgrade perlUpgrade perl-IO-debuginfoUpgrade perl-openUpgrade perl-DirHandleUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-Term-CompleteUpgrade perl-Time-PieceUpgrade perl-libs-debuginfoUpgrade perl-I18N-LangTagsUpgrade perl-GDBM_File-debuginfoUpgrade perl-autouseUpgrade perl-BUpgrade perl-ExtUtils-EmbedUpgrade perl-File-CompareUpgrade perl-lessUpgrade perl-IOUpgrade perl-debuginfoUpgrade perl-libnetcfgUpgrade perl-sortUpgrade perl-interpreterUpgrade perl-overloadUpgrade perl-Time-Piece-debuginfoUpgrade perl-fieldsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-DumpvalueUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-File-DosGlob-debuginfoUpgrade perl-SelfLoaderUpgrade perl-SelectSaverUpgrade perl-FindBinUpgrade perl-blibUpgrade perl-libUpgrade perl-File-FindUpgrade perl-ErrnoUpgrade perl-debuggerUpgrade perl-OpcodeUpgrade perl-deprecateUpgrade perl-POSIX-debuginfoUpgrade perl-NDBM_File-debuginfoUpgrade perl-Attribute-HandlersUpgrade perl-encoding-warningsUpgrade perl-Class-StructUpgrade perl-NEXTUpgrade perl-GDBM_FileUpgrade perl-I18N-LanginfoUpgrade perl-DynaLoaderUpgrade perl-ExtUtils-MiniperlUpgrade perl-develUpgrade perl-AutoLoaderUpgrade perl-I18N-CollateUpgrade perl-File-DosGlobUpgrade perl-debugsourceUpgrade perl-libsUpgrade perl-B-debuginfoUpgrade perl-DBM_FilterUpgrade perl-utilsUpgrade perl-AutoSplitUpgrade perl-Config-ExtensionsUpgrade perl-Thread-SemaphoreUpgrade perl-Hash-UtilUpgrade perl-Math-ComplexUpgrade perl-NDBM_FileUpgrade perl-varsUpgrade perl-Devel-PeekUpgrade perl-ODBM_File-debuginfoUpgrade perl-Text-AbbrevUpgrade perl-Devel-SelfStubberUpgrade perl-overloadingUpgrade perl-POSIXUpgrade perl-FileCacheUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Pod-FunctionsUpgrade perl-TestUpgrade perl-phNo solution existsUpgrade perl-Fcntl-debuginfoUpgrade perl-docUpgrade perl-Opcode-debuginfoUpgrade perl-File-CopyUpgrade perl-sigtrapUpgrade perl-Search-DictUpgrade perl-subs | Jul 9, 2025 | Apr 13, 2025 |
| Rocky_linux | — | Upgrade perl-debugsourceUpgrade perl-POSIXUpgrade perl-NDBM_FileUpgrade perl-I18N-LanginfoUpgrade perl-mro-debuginfoUpgrade perl-File-DosGlobUpgrade perl-DynaLoaderUpgrade perl-OpcodeUpgrade perl-NDBM_File-debuginfoUpgrade perl-Devel-PeekUpgrade perl-B-debuginfoUpgrade perl-phUpgrade perl-Hash-Util-debuginfoUpgrade perl-Hash-Util-FieldHashUpgrade perl-develUpgrade perl-File-DosGlob-debuginfoUpgrade perl-libUpgrade perl-ODBM_File-debuginfoUpgrade perl-libsUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-POSIX-debuginfoUpgrade perl-Opcode-debuginfoUpgrade perl-GDBM_FileUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-BUpgrade perl-interpreterUpgrade perl-IO-debuginfoUpgrade perl-Time-PieceUpgrade perl-Devel-Peek-debuginfoUpgrade perl-mroUpgrade perl-debuginfoUpgrade perl-Fcntl-debuginfoUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-ErrnoUpgrade perl-IOUpgrade perl-GDBM_File-debuginfoUpgrade perl-ODBM_FileUpgrade perlUpgrade perl-Hash-UtilUpgrade perl-FcntlUpgrade perl-libs-debuginfoUpgrade perl-interpreter-debuginfo | Oct 6, 2025 | Oct 3, 2025 |
| Ubuntu | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 13, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub