{"id":"CVE-2026-107794","published":"2026-10-10T13:17:31.357","lastModified":"2026-10-16T20:17:18.793","description":"ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list.\n\nThe OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with 2^32 slots, leading to memory exhaustion.\n\nNote that a similar issue was fixed in ExtUtils::Typemaps::STL::Vector version 1.05.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-191"],"vendors":[],"products":[],"references":[{"url":"https://metacpan.org/release/SMUELLER/ExtUtils-Typemaps-Default-1.07/changes","tags":[]},{"url":"https://rt.cpan.org/Public/Bug/Display.html?id=91213","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-10076","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A memory exhaustion vulnerability exists in ExtUtils::Typemaps::STL::List versions before 1.07 where an empty list causes an integer overflow leading to allocation of a 32 GiB array. This can cause denial of service through memory exhaustion.","exploitability":"Exploitation is moderately difficult as it requires triggering the OUTPUT typemaps with an empty list, but no complex preconditions are needed beyond having the vulnerable module installed.","blast_radius":"The impact is limited to systems using this specific Perl module in a context where large memory allocations could cause service disruption, particularly in environments processing large data sets or under memory-constrained conditions.","remediation":"Upgrade to version 1.07 or later of ExtUtils::Typemaps::STL::List.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["memory-exhaustion","perl","denial-of-service"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:11:58.356Z"}}