CVE-2026-107373 Details
Description
ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string( SvPV_nolen($arg), SvCUR($arg) ) However, evaluation order for C++ arguments is not specified, and some compilers may produce code that evalutes SvCUR($arg) first. When $arg is not a string (for example, an interger, number or a reference) then SvCUR will return an invalid value, and the program may abort or segfault.
A vulnerability exists in ExtUtils::Typemaps::STL::String versions prior to 1.06 for Perl. The issue arises in the T_STD_STRING typemap, where the length of a scalar value (SV) is read before the value is properly stringified. This can lead to incorrect length readings, especially when the SV is not a string, such as an integer, number, or reference. Some compilers may evaluate the argument length before the value is stringified, causing the program to crash or segmentation fault.
Users should update to ExtUtils::Typemaps::STL::String version 1.06 or later.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 10, 2026CISA-ADP
Assessed Oct 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/tsee/extutils-typemap-default/commit/a6b9c298b34ddadc582961403e715d292f82a22d | CPANSec | Source CodeVendor |
| https://metacpan.org/release/SMUELLER/ExtUtils-Typemaps-Default-1.06/changes | CPANSec | Release NotesVendor |
| https://rt.cpan.org/Public/Bug/Display.html?id=94110 | CPANSec | Issue TrackingTechnical DescriptionVendor |
| https://www.cve.org/CVERecord?id=CVE-2026-80490 | CPANSec |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | CPANSec |
Affected Products
| Product | Versions |
|---|---|
| ExtUtils::Typemaps::STL::String | < 1.06 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 16, 2026 | CVE Modified | CISA-ADP |
| Oct 10, 2026 | New CVE Received | CPANSec |