CVE-2006-10002 XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes

🗓️ 19 Mar 2026 11:03:46Reported by CPANSecType

vulnrichment🔗 github.com👁 4 Views

CVE-2006-10002: XML::Parser for Perl overflows buffer in parse_stream, causing heap corruption and crashes.

Reporter	Title	Published	Views	Family All 135
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	20 May 202615:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	25 May 202613:53	–	ibm
ATTACKERKB	CVE-2006-10002	19 Mar 202611:03	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : perl-XML-Parser, perl-XML-Parser-tests (ALAS2023-2026-1536)	13 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : perl-XML-Parser, --advisory ALAS2-2026-3230 (ALAS-2026-3230)	14 Apr 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : perl-XML-Parser (ALSA-2026:7679)	16 Apr 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : perl-XML-Parser (ALSA-2026:7680)	15 Apr 202600:00	–	nessus
Tenable Nessus	AlmaLinux 8 : perl-XML-Parser (ALSA-2026:7681)	16 Apr 202600:00	–	nessus
Tenable Nessus	Debian dla-4522 : libxml-parser-perl - security update	5 Apr 202600:00	–	nessus
Tenable Nessus	Fedora 45 : perl-XML-Parser (2026-7d5754535f)	23 Mar 202600:00	–	nessus

Source	Link
rt	www.rt.cpan.org/Ticket/Display.html
metacpan	www.metacpan.org/release/TODDR/XML-Parser-2.46/changes
github	www.github.com/cpan-authors/XML-Parser/issues/64
github	www.github.com/cpan-authors/XML-Parser/commit/56b0509dfc6b559cd7555ea81ee62e3622069255.patch

21 Mar 2026 11:43Current

6Medium risk

Vulners AI Score6

EPSS0.00604

SSVC

CWE-122 CWE-176

xml parser perl overflow buffer overflow heap corruption double free crashes