vulnerability
FreeBSD: VID-a380f43e-19e5-11f0-9568-b42e991fc52e (CVE-2024-56406): Perl -- heap buffer overflow when transliterating non-ASCII bytes
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | Apr 15, 2025 | Apr 16, 2025 | Dec 10, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Apr 15, 2025
Added
Apr 16, 2025
Modified
Dec 10, 2025
Description
9b29abf9-4ab0-4765-b253-1875cd9b441e reports: A heap buffer overflow vulnerability was discovered in Perl. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`. $ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped) It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.
Solutions
freebsd-upgrade-package-perl5-36freebsd-upgrade-package-perl5-38freebsd-upgrade-package-perl5-40freebsd-upgrade-package-perl5-devel
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.