In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.

🗓️ 04 Sep 2025 05:27:01Reported by MicrosoftType

Perl before 5.38.2 may write to unallocated space in \p{...} property parsing; earliest affected 5.30.0.

Reporter	Title	Published	Views	Family All 52
IBM Security Bulletins	Security Bulletin: Vulnerability in Perl affects IBM watsonx.data	18 Sep 202419:55	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021, CVE-2023-47038, CVE-2023-47100)	23 Feb 202416:53	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to security restriction bypass due to the Perl package (CVE-2023-47100).	15 May 202522:52	–	ibm
Tenable Nessus	Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2023-448)	15 Dec 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : perl (EulerOS-SA-2024-1110)	26 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : perl (EulerOS-SA-2024-1126)	26 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.1 : perl (EulerOS-SA-2024-1418)	21 Mar 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.0 : perl (EulerOS-SA-2024-1446)	21 Mar 202400:00	–	nessus
Tenable Nessus	macOS 15.x < 15.2 Multiple Vulnerabilities (121839)	11 Dec 202400:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : perl Multiple Vulnerabilities (NS-SA-2025-0135)	25 Jul 202500:00	–	nessus