https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 22:40:37 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-107373 <p>ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument.</p> <p>The typemap uses</p> <p>$var = std::string( SvPV_nolen($arg), SvCUR($arg) )</p> <p>However, evaluation order for C++ arguments is not specified, and some compilers may produce code that evalutes SvCUR($arg) first.</p> <p>When $arg is not a string (for example, an interger, number or a reference) then SvCUR will return an invalid value, and the program may abort or segfault.</p> <p>ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument.</p> <p>The typemap uses</p> <p>$var = std::string( SvPV_nolen($arg), SvCUR($arg) )</p> <p>However, evaluation order for C++ arguments is not specified, and some compilers may produce code that evalutes SvCUR($arg) first.</p> <p>When $arg is not a string (for example, an interger, number or a reference) then SvCUR will return an invalid value, and the program may abort or segfault.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-107373 https://vulnerability.circl.lu/vuln/ghsa-g3mm-4ggm-mrv5 <p>ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument.</p> <p>The typemap uses</p> <p>$var = std::string( SvPV_nolen($arg), SvCUR($arg) )</p> <p>However, evaluation order for C++ arguments is not specified, and some compilers may produce code that evalutes SvCUR($arg) first.</p> <p>When $arg is not a string (for example, an interger, number or a reference) then SvCUR will return an invalid value, and the program may abort or segfault.</p> <p>ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument.</p> <p>The typemap uses</p> <p>$var = std::string( SvPV_nolen($arg), SvCUR($arg) )</p> <p>However, evaluation order for C++ arguments is not specified, and some compilers may produce code that evalutes SvCUR($arg) first.</p> <p>When $arg is not a string (for example, an interger, number or a reference) then SvCUR will return an invalid value, and the program may abort or segfault.</p> https://vulnerability.circl.lu/vuln/ghsa-g3mm-4ggm-mrv5