Integer Buffer Overflow Vulnerability in Cpanel::JSON::XS for Perl

CVE-2025-40929

What is CVE-2025-40929?

An integer buffer overflow vulnerability has been identified in Cpanel::JSON::XS prior to version 4.40 for Perl. This issue occurs during the parsing of specifically crafted JSON data, potentially leading to a segmentation fault. The vulnerability can be exploited to launch denial-of-service attacks, impacting the availability of the affected applications and services. Users are advised to update to the latest version to mitigate this risk and ensure system integrity.

References