The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoVulnerability
CVE-2026-80490: Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-80490
- Published
- Record updated
Summary
Algorithm::AhoCorasick::XS for Perl, versions through 0.04, reads the haystack's length with the SvCUR macro before the scalar is stringified. When the input is a reference, integer or float, the length is invalid, causing an out-of-bounds read that can abort the process. Because the evaluation order of arguments to std::string is unspecified, the abort may occur in a way that cannot be caught within Perl.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.