CVE-2026-57433

Versions of Storable before 3.41 for Perl are vulnerable to a signed integer overflow during the deserialization of a crafted SX_HOOK record. The retrieve_hook_common function reads a signed 32-bit item count and calls av_extend with that count plus one; if the count is I32_MAX, the addition wrap...