CVE-2026-107373

Summary

A buffer over-read vulnerability exists in ExtUtils::Typemaps::STL::String typemap where incorrect evaluation order can cause reading of invalid string length values when processing non-string arguments, potentially leading to program crashes or segmentation faults.

Exploitability

Exploitation is moderately difficult as it requires controlling the input to a Perl script that uses the affected typemap with non-string arguments, but the vulnerability can be triggered through standard Perl argument passing patterns.

Blast radius

The impact could affect any Perl application using the ExtUtils::Typemaps::STL::String typemap with non-string arguments, potentially causing widespread application instability and crashes across systems running affected Perl modules.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.06 or later of ExtUtils::Typemaps::STL::String

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.