Memory Management Flaw in Perl's Regular Expression Handling

CVE-2023-47100

What is CVE-2023-47100?

A vulnerability in Perl affects the S_parse_uniprop_string function in regcomp.c, where improper handling of a property name related to the \p{...} regular expression can lead to writes to unallocated memory space. This flaw has the potential to disrupt programs using affected versions of Perl, particularly those that rely on regular expression parsing. The issue was introduced in version 5.30.0 and persists through 5.38.1, with fixes implemented in version 5.38.2.

References