CVE-2026-9265 Details
Description
Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path. print_attribute() copies a UTF8STRING ASN.1 attribute value into a heap buffer sized exactly to its declared length via strncpy, leaving no NUL terminator. Downstream callers run strlen() on the result and pass the inflated length to newSVpvn(), copying attacker-influenced adjacent heap bytes into a Perl scalar.
A heap out-of-bounds read vulnerability has been identified in Crypt::OpenSSL::PKCS12 versions prior to 1.96 for Perl. The issue arises in the print_attribute function when handling UTF8STRING ASN.1 attribute values. The function copies the attribute data into a heap buffer that is precisely sized to the declared length, using strncpy. However, this method does not append a null terminator, leading to potential memory mismanagement. Subsequent operations that rely on string length, such as strlen(), can inadvertently access adjacent, attacker-influenced heap memory, creating a risk of information disclosure or memory corruption.
Users are advised to update to Crypt::OpenSSL::PKCS12 version 1.96 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 20, 2026CISA-ADP
Assessed Jun 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/dsully/perl-crypt-openssl-pkcs12/commit/a7bd2f319fa8aab8177b3d767ea06dd85ceb3173.patch | CPANSec | Source CodeVendor |
| https://github.com/dsully/perl-crypt-openssl-pkcs12/issues/55 | CPANSec | ExploitIssue TrackingTechnical DescriptionVendor |
| https://metacpan.org/release/JONASBN/Crypt-OpenSSL-PKCS12-1.96/source/Changes.md | CPANSec | Release NotesVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | CPANSec |
Affected Products
| Product | Versions |
|---|---|
| Crypt::OpenSSL::PKCS12 | < 1.96 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 22, 2026 | CVE Modified | CISA-ADP |
| Jun 20, 2026 | New CVE Received | CPANSec |