Memory Exhaustion in Text::CSV_XS for Perl Affects Multiple Versions
CVE-2026-110752
Currently unrated
What is CVE-2026-110752?
The Text::CSV_XS Perl module is susceptible to a memory exhaustion vulnerability that can be exploited by sending a request with a manipulated fragment. The vulnerability arises due to improper handling of RFC 7111 selectors, which can lead to excessive memory allocation. Specifically, the allocation method for arrays can cause a massive increase in memory usage when processing large or malformed ranges, thereby resulting in an Out of Memory error that cannot be intercepted by the eval construct, ultimately terminating the application. Users should upgrade to Text::CSV_XS version 1.65 or later to mitigate this issue.