CVE-2026-107794

The ExtUtils::Typemaps::STL::List Perl module (versions before 1.07 ) contains a memory exhaustion vulnerability. The root cause is an integer underflow (CWE-191) occurring within the OUTPUT typemaps call, where av_extend( av, len-1 ) is executed on an empty list. This causes the system to attemp...

CVE-2026-107794 ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion. Note that a similar issue was...

CVE-2013-10076

The ExtUtils::Typemaps::STL::Vector component for Perl (versions before 1.05 ) is vulnerable to memory exhaustion. The root cause is an integer underflow (CWE-191) occurring during the OUTPUT typemaps call, where av_extend( av, len-1 ) is executed on an empty list. This results in the allocation ...

EUVD-2013-7295

ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion...

CVE-2026-57433: Integer Overflow or Wraparound

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed 32-bit item count from an SXHOOK record and calls avextend with that count plus one. A count of I32MAX wraps the addition to a negative value. A...