CVE-2026-2597

The Crypt::SysRandom::XS Perl module versions before 0.010 are vulnerable to a heap buffer overflow within the random_bytes() XS function. The root cause is a lack of validation for the length parameter; providing a negative value causes an integer wraparound during the allocation expression, lea...