CVE-2026-57074
Vulnerability Description
XML::Bare versions through 0.53 for Perl have an unbounded character lookahead.
The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offsets are within the buffer.
Truncated strings such as "<a/" can trigger an out-of-bounds read.
The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offsets are within the buffer.
Truncated strings such as "<a/" can trigger an out-of-bounds read.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-125
Source
NVD
Vendor
CODECHILD
Product
XML::Bare
Discussion (0)
Add Comment
No comments yet. Be the first!