Memory Exhaustion Vulnerability in ExtUtils::Typemaps for Perl
CVE-2013-10076

Currently unrated

Key Information:

Vendor

Perl

Status
Vendor
CVE Published:
10 October 2026

What is CVE-2013-10076?

A vulnerability in ExtUtils::Typemaps::STL::Vector for Perl allows an empty list to lead to the allocation of a massive 32 GiB array due to improper handling of the av_extend function. This can result in significant memory exhaustion, potentially leading to the application hanging or crashing, thereby affecting service availability. The issue is present in versions prior to 1.05 and can be addressed with a patch provided in relevant updates.

References

https://metacpan.org/release/SMUELLER/ExtUtils-Typemaps-D...
release-notes
https://rt.cpan.org/Public/Bug/Display.html?id=91213
issue-tracking
https://github.com/tsee/extutils-typemap-default/commit/0...
patch

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.