Heap-Based Buffer Overflow in Perl 5 by The Perl Foundation

CVE-2017-12837

What is CVE-2017-12837?

A heap-based buffer overflow vulnerability exists in the S_regatom function within regcomp.c of Perl 5, which can be exploited by remote attackers. By using a specially crafted regular expression containing a '\N{}' escape alongside the case-insensitive modifier, an attacker can trigger an out-of-bounds write. This results in a denial of service, potentially compromising the stability and availability of applications utilizing affected versions of Perl.

References