{"id":"CVE-2013-10076","published":"2026-10-10T13:17:30.610","lastModified":"2026-10-16T16:16:47.690","description":"ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list.\n\nThe OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with 2^32 slots, leading to memory exhaustion.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-191"],"vendors":[],"products":[],"references":[{"url":"https://github.com/tsee/extutils-typemap-default/commit/0eb696b75afcfedbf87a72e11d44d98110863934.patch","tags":[]},{"url":"https://metacpan.org/release/SMUELLER/ExtUtils-Typemaps-Default-1.05/changes","tags":[]},{"url":"https://rt.cpan.org/Public/Bug/Display.html?id=91213","tags":[]}],"exploitRefs":[{"url":"https://github.com/tsee/extutils-typemap-default/commit/0eb696b75afcfedbf87a72e11d44d98110863934.patch","tags":[]}],"hasPoc":true,"ai":{"summary":"A Perl module flaw allows attackers to trigger a memory exhaustion attack by exploiting an integer underflow in array allocation. When processing empty lists, the module allocates a massive 32 GiB array instead of a small one, leading to system resource exhaustion.","exploitability":"Exploitation is moderately difficult as it requires crafting specific input data that triggers the STL::Vector typemap processing with empty lists, but the attack can be automated once the trigger conditions are met.","blast_radius":"The impact could be significant in environments where Perl applications process untrusted input through ExtUtils::Typemaps::STL::Vector, potentially leading to service disruption or denial of service across multiple processes.","remediation":"Upgrade to ExtUtils::Typemaps::STL::Vector version 1.05 or later to fix the integer underflow issue.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["memory-exhaustion","perl","dos"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:12:05.554Z"}}