https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:30:03 +0000 https://vulnerability.circl.lu/vuln/cve-2024-56406 <p><strong>Affected:</strong> perl</p> <p>A heap buffer overflow vulnerability was discovered in Perl.</p> <p>Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.</p> <p>When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.</p> <p>$ perl -e &#39;$_ = &#34;\x{FF}&#34; x 1000000; tr/\xFF/\x{100}/;&#39;    Segmentation fault (core dumped)</p> <p>It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.</p> <p><strong>Affected:</strong> perl</p> <p>A heap buffer overflow vulnerability was discovered in Perl.</p> <p>Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.</p> <p>When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.</p> <p>$ perl -e &#39;$_ = &#34;\x{FF}&#34; x 1000000; tr/\xFF/\x{100}/;&#39;    Segmentation fault (core dumped)</p> <p>It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.</p> https://vulnerability.circl.lu/vuln/cve-2024-56406