CVE-2026-58102

Crypt::OpenSSL::X509 for Perl prior to 2.1.3 is vulnerable to a heap out-of-bounds read in the hv_exts code path. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code uses OBJ_obj2txt()’s return value as the hash-key...