PT-2026-109645 · Cpan · Extutils::Typemaps::Stl::List
CVE-2026-107794
·
Published
2026-10-10
·
Updated
2026-10-10
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
ExtUtils::Typemaps::STL::List versions prior to 1.07
Description
An issue exists where the software allocates a 32 GiB array when processing an empty list. This occurs because the OUTPUT typemaps call the
av extend( av, len-1 ) function; when the list is empty, an undeflow occurs, causing av extend to allocate an array with 2^32 slots, which results in memory exhaustion.Recommendations
Update to version 1.07 or later.
Integer Underflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Extutils::Typemaps::Stl::List