CVE-2026-57080

Net::BitTorrent versions through 2.1.0 for Perl are vulnerable to remote memory exhaustion due to an uncapped peer-wire message-length prefix. The _process_messages function trusts a 4-byte length prefix from connected peers without an upper bound, while receive_data appends all inbound bytes to ...