CVE-2020-12723High· 7.5▾ Twilightregcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 1.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
6.0%
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
perl < 5.30.3oncommand_workflow_automationsnap_creator_frameworkfedora = 31leap = 15.1communications_billing_and_revenue_management = 12.0.0.2.0communications_billing_and_revenue_management = 12.0.0.3.0communications_diameter_signaling_router >= 8.0.0, <= 8.5.0communications_eagle_application_processor >= 16.1.0, <= 16.4.0communications_eagle_lnp_application_processor = 10.1communications_eagle_lnp_application_processor = 10.2communications_lsms >= 13.1, <= 13.4communications_offline_mediation_controller = 12.0.0.3.0communications_performance_intelligence_center >= 10.3.0.0.0, <= 10.3.0.2.1communications_performance_intelligence_center >= 10.4.0.1.0, <= 10.4.0.3.1configuration_manager = 12.1.2.0.8enterprise_manager_base_platform = 13.4.0.0sd-wan_edge = 8.2sd-wan_edge = 9.0sd-wan_edge = 9.1tekelec_platform_distribution >= 7.4.0, <= 7.7.1Upgrade past the affected range:
perl 5.30.3Connected by shared product, vendor, weakness, or advisory.
CVE-2020-10543High· 8.2Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
CVE-2020-10878High· 8.6Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation
CVE-2021-3177Critical· 9.8Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300…
CVE-2021-3711Critical· 9.8In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt()
CVE-2026-13221Critical· 9.1Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl…
CVE-2026-57432High· 8.4Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item's size tim…