CVE-2026-57080

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix. The peer-wire framing in processmessages trusts the 4-byte length prefix sent by a connected peer with no upper bound, while receivedata appends every inbound byte to th...

PT-2026-53855

Name of the Vulnerable Software and Affected Versions Net::BitTorrent versions prior to 2.0.2 Description Remote memory exhaustion is possible due to an uncapped peer-wire message-length prefix. The peer-wire framing in the process messages function trusts the 4-byte length prefix sent by a...