CVE-2026-41565 Details
Description
CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers. The gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three. Any caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.
A stack buffer overflow vulnerability has been identified in CryptX versions prior to 0.088_001 for Perl. The issue resides in four authenticated encryption with associated data (AEAD) decryption verification helpers: gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify, and eax_decrypt_verify. These routines improperly handled the authentication tag by copying it into a fixed 144-byte stack buffer without validating the length of the supplied tag. This oversight allows a longer tag to overwrite adjacent stack memory, potentially leading to arbitrary code execution or other malicious outcomes. The vulnerability can be exploited by any caller of the affected helpers that sends an attacker-controlled tag exceeding the buffer size.
Users should upgrade to CryptX version 0.088_001 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 28, 2026CISA-ADP
Assessed May 29, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/DCIT/perl-CryptX/commit/57e69e541b0718ca8724c2f61514322a2d859bc1.patch | CPANSec | Source CodeVendor |
| https://github.com/DCIT/perl-CryptX/commit/7e56347d420aaf43b2ee1586f4a230492ccf1642.patch | CPANSec | Source CodeVendor |
| https://metacpan.org/release/MIK/CryptX-0.088_001 | CPANSec | ProductVendor |
| http://www.openwall.com/lists/oss-security/2026/05/28/10 | CVE |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | CPANSec |
Affected Products
| Product | Versions |
|---|---|
| CryptX | < 0.088_001 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CPANSec |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 29, 2026 | CVE Modified | CISA-ADP |
| May 28, 2026 | CVE Modified | CVE |
| May 28, 2026 | New CVE Received | CPANSec |