CVE-2026-56015

Name of the Vulnerable Software and Affected Versions Net::IP::LPM versions prior to 1.11

Description An issue exists where a heap out-of-bounds read can occur due to an unbounded prefix length. The add() function passes a prefix string to the addPrefixToTrie() function without verifying it against the address width. Consequently, addPrefixToTrie() reads past the end of the packed address buffer (4 bytes for IPv4 or 16 bytes for IPv6) when a prefix length exceeds 32 for IPv4 or 128 for IPv6. This read occurs during trie construction and is limited to a maximum of 32 bytes from the start of the packed address. While the out-of-bounds bytes are not exposed through the module API, the process may abort when using AddressSanitizer, valgrind, or a hardened allocator.

Recommendations Update Net::IP::LPM to a version newer than 1.10.