Integer Buffer Overflow Vulnerability in Cpanel::JSON::XS for Perl
CVE-2025-40929

5.6MEDIUM

Key Information:

Vendor

Rurban

Status
Cpanel::json::xs
Vendor
CVE Published:
8 September 2025

What is CVE-2025-40929?

An integer buffer overflow vulnerability has been identified in Cpanel::JSON::XS prior to version 4.40 for Perl. This issue occurs during the parsing of specifically crafted JSON data, potentially leading to a segmentation fault. The vulnerability can be exploited to launch denial-of-service attacks, impacting the availability of the affected applications and services. Users are advised to update to the latest version to mitigate this risk and ensure system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Cpanel::JSON::XS 0 < 4.40

References

https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.39/s...
related
https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.40/c...
release-notes
https://github.com/rurban/Cpanel-JSON-XS/commit/378236219...
patch

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Hudak of rasotec
JSON
.