CVE-2006-10002
XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes
- State
- Published
- Severity
- 9.8 Critical
- Published
- Mar 19, 2026
- Updated
- Apr 29, 2026
- Reserved
- Mar 16, 2026
Description
XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes.
A :utf8 PerlIO layer, parse_stream() in Expat.xs could overflow the XML input buffer because Perl's read() returns decoded characters while SvPV() gives back multi-byte UTF-8 bytes that can exceed the pre-allocated buffer size. This can cause heap corruption (double free or corruption) and crashes.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
XML::ParserTODDR |
|
References
- https://rt.cpan.org/Ticket/Display.html?id=19859issue-tracking
- https://github.com/cpan-authors/XML-Parser/issues/64issue-tracking
- https://metacpan.org/release/TODDR/XML-Parser-2.46/changesrelease-notes
- https://github.com/cpan-authors/XML-Parser/commit/56b0509dfc6b559cd7555ea81ee62e3622069255.patchpatch
- http://www.openwall.com/lists/oss-security/2026/03/19/1
- http://www.openwall.com/lists/oss-security/2026/03/22/3
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.