CVE-2026-9265

CVE-2026-9265 affects Crypt::OpenSSL::PKCS12 on Perl before 1.96. The issue stems from print_attribute() copying a UTF8STRING attribute into a heap buffer with a length-limited strncpy and no NUL terminator. Downstream code calls strlen on the result and uses the inflated length in newSVpvn(), wh...