CVE-2026-116267

MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message. Each stored parser diagnostic is indented by three spaces per nesting level. When a message nested N levels deep ends without its closing boundaries, every leve...

CVE-2026-116270

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

CVE-2026-116272

MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment. A parameter written boundaryc="A" or boundary="A" is stored under that literal name rather than as boundary. A second boundary parameter is then not reported as a...

CVE-2026-116271

MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes. Each message is written to a directory named msg--- under the output base, and an existing directory of that name is used as is. A...

CVE-2026-116273

MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The maxparts option defaulted to -1, which disables the limit, so a parser created with default settings builds an entity for every part however many a message has...

EUVD-2026-112306

MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The maxparts option defaulted to -1, which disables the limit, so a parser created with default settings builds an entity for every part however many a message has...

CVE-2026-116273 MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion

MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The maxparts option defaulted to -1, which disables the limit, so a parser created with default settings builds an entity for every part however many a message has...

CVE-2026-116273

The MIME::Parser component for Perl is vulnerable to memory exhaustion because versions before 5.521 set the max_parts option to -1 by default, removing any limit on the number of message parts. This allows a parser to build an entity for every part in a message regardless of size. Version 5.521 ...

CVE-2026-116272 MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment

MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment. A parameter written boundaryc="A" or boundary="A" is stored under that literal name rather than as boundary. A second boundary parameter is then not reported as a...

CVE-2026-116272

The MIME::Field::ParamVal component in Perl (versions before 5.521 ) fails to flag duplicate boundary parameters when the name contains a nested comment, such as boundary((c))="A". This causes the parameter to be stored under its literal name, allowing a second boundary parameter to go undetected...

EUVD-2026-112305

MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment. A parameter written boundaryc="A" or boundary="A" is stored under that literal name rather than as boundary. A second boundary parameter is then not reported as a...

EUVD-2026-112304

MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes. Each message is written to a directory named msg--- under the output base, and an existing directory of that name is used as is. A...

CVE-2026-116271 MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes

MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes. Each message is written to a directory named msg--- under the output base, and an existing directory of that name is used as is. A...

CVE-2026-116271

The MIME::Parser::FileUnder module in Perl (versions before 5.521 ) is vulnerable to a symlink attack. The module reuses pre-existing directories for message output and follows symlinks within them. If the output base (such as /tmp) is writable by other users, a local attacker can pre-create a di...

EUVD-2026-112303

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

CVE-2026-116270 MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

CVE-2026-116270

The MIME::Words component for Perl (versions before 5.521 ) is vulnerable to memory exhaustion due to how it handles the decode_mimewords function. For every "=?" sequence that does not begin a complete encoded word, the function appends an error message containing the entire input string to the ...

EUVD-2026-112299

MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message. Each stored parser diagnostic is indented by three spaces per nesting level. When a message nested N levels deep ends without its closing boundaries, every leve...

CVE-2026-116267 MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message

MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message. Each stored parser diagnostic is indented by three spaces per nesting level. When a message nested N levels deep ends without its closing boundaries, every leve...

CVE-2026-116267

The MIME::Parser module for Perl (versions before 5.521 ) is vulnerable to memory exhaustion due to an inefficient algorithmic complexity issue (CWE-407 ). The parser indents stored diagnostics by three spaces per nesting level. When a message nested $N$ levels deep is truncated without closing b...