CVE-2026-58102 Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts

🗓️ 13 Jul 2026 22:22:48Reported by GoogleType

osv🔗 osv.dev👁 3 Views

CVE-2026-58102: Crypt::OpenSSL::X509 before 2.1.3 permits a heap out-of-bounds read from long extension OID during hash construction.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2026-58102	13 Jul 202622:22	–	attackerkb
Circl	CVE-2026-58102	14 Jul 202613:44	–	circl
CVE	CVE-2026-58102	13 Jul 202622:22	–	cve
Cvelist	CVE-2026-58102 Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts	13 Jul 202622:22	–	cvelist
EUVD	EUVD-2026-43574	14 Jul 202600:31	–	euvd
NVD	CVE-2026-58102	13 Jul 202623:16	–	nvd
OSV	DEBIAN-CVE-2026-58102	13 Jul 202623:16	–	osv
OSV	UBUNTU-CVE-2026-58102	13 Jul 202623:16	–	osv
Positive Technologies	PT-2026-57918	13 Jul 202600:00	–	ptsecurity
UbuntuCve	CVE-2026-58102	13 Jul 202623:16	–	ubuntucve

Source	Link
cpan	www.cpan.org/modules
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58102.json
metacpan	www.metacpan.org/release/JONASBN/Crypt-OpenSSL-X509-2.1.3/source/Changes.md
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-58102
github	www.github.com/dsully/perl-crypt-openssl-x509/commit/757289bfce095455c104d4adfe9312e7b339620f.patch
github	www.github.com/dsully/perl-crypt-openssl-x509

16 Jul 2026 03:46Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.19.1

EPSS0.00222