CVE-2026-57432 Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack

[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "packageName": "perl",
    "product": "perl",
    "programFiles": [
      "pp_pack.c"
    ],
    "programRoutines": [
      {
        "name": "S_measure_struct"
      }
    ],
    "repo": "https://github.com/Perl/perl5",
    "vendor": "SHAY",
    "versions": [
      {
        "lessThanOrEqual": "5.43.10",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]