Type Handling Flaw in ExtUtils::Typemaps::STL::String by SMUELLER
CVE-2026-107373

Currently unrated

Key Information:

Vendor

SMUELLER

Status
Vendor
CVE Published:
10 October 2026

What is CVE-2026-107373?

A vulnerability exists in ExtUtils::Typemaps::STL::String versions prior to 1.06, where the evaluation order of C++ arguments is not guaranteed. This may result in the internal handling of non-string arguments, such as integers or references, causing the application to read invalid string lengths. Consequently, this could lead to unexpected behavior, including program crashes or segmentation faults due to mismanagement of memory allocation.

References

https://metacpan.org/release/SMUELLER/ExtUtils-Typemaps-D...
release-notes
https://github.com/tsee/extutils-typemap-default/commit/a...
https://rt.cpan.org/Public/Bug/Display.html?id=94110
issue-tracking

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.