CVE-2026-80490

Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified. The matches, firstmatch and matchdetails methods use the TSTDSTRING typemap to translate Perl scalars SVs into strings via the std::string constructor, using the SvPV macro ...

CVE-2026-80490 Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified

Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified. The matches, firstmatch and matchdetails methods use the TSTDSTRING typemap to translate Perl scalars SVs into strings via the std::string constructor, using the SvPV macro ...

CVE-2026-80490

The Algorithm::AhoCorasick::XS Perl module (versions through 0.04 ) is vulnerable to an out-of-bounds read due to improper handling of Perl scalars during stringification. The matches, first_match, and match_details methods use the T_STD_STRING typemap, which employs the SvCUR macro to determine ...

EUVD-2026-90025

Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified. The matches, firstmatch and matchdetails methods use the TSTDSTRING typemap to translate Perl scalars SVs into strings via the std::string constructor, using the SvPV macro ...