Orta CVSS 6.5
CVE-2026-110754: CVE-2026-110754: güvenlik açığı
Açıklama (NVD)
Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a new array and returns a reference to it only when the parse succeeds. When the record has a syntax error, getline returns undef and never frees the array or the fields parsed before the error. A long-running process parsing untrusted CSV retains every malformed record it is sent, so repeated malformed input exhausts its memory.
Özet bilgiler
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- %0,30 (yüzdelik 23)
- CWE
- CWE-401
- Yama
- Yok / bilinmiyor