CVE-2026-107794

Summary

A memory exhaustion vulnerability exists in ExtUtils::Typemaps::STL::List versions before 1.07 where an empty list causes an integer overflow leading to allocation of a 32 GiB array. This can cause denial of service through memory exhaustion.

Exploitability

Exploitation is moderately difficult as it requires triggering the OUTPUT typemaps with an empty list, but no complex preconditions are needed beyond having the vulnerable module installed.

Blast radius

The impact is limited to systems using this specific Perl module in a context where large memory allocations could cause service disruption, particularly in environments processing large data sets or under memory-constrained conditions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.07 or later of ExtUtils::Typemaps::STL::List.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.