Aller au contenu
en Se connecter
7.3 Élevée

CVE-2026-5089 YAML::Syck versions before 1.38 for Perl has an out-of-bounds read

Description

YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#base60 handlers. When processing the leftmost segment of a colon-separated value (e.g., the 1 in 1:30:45), the inner while loop can decrement a pointer past the start of the string buffer: while ( colon >= ptr && *colon != ':' ) { colon--; } if ( *colon == ':' ) *colon = '\0'; // colon may be ptr-1 here When no colon is found (final/leftmost segment), colon becomes ptr-1, and the subsequent *colon dereference reads one byte before the allocated buffer.

Produits et versions touchés

Produit Versions touchées Corrigé en
YAML::Syck 1.38 premières → < 1.38 1.38

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de YAML::Syck

Les 7 CVE de YAML::Syck →
CVE-2026-57077 YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len 7.7 Élevée CVE-2026-57076 YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key… 7.8 Élevée CVE-2026-57075 YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in… 9.1 Critique CVE-2026-13713 YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still… 6.2 Moyenne
Suivre cette CVE