Memory Exhaustion in Pod::Text for Perl Affects RRA

CVE-2026-82560

What is CVE-2026-82560?

In versions of Pod::Text prior to 6.1.1, a vulnerability allows for CPU and memory exhaustion due to improper handling of nested formatting in POD documents. Each =over directive increases the indent margin, and if nesting continues without proper limits, the available space for text eventually becomes negative. This leads to an infinite loop where formatting an attacker-controlled POD document consumes memory indefinitely, ultimately causing exhaustion of system resources and unresponsiveness.

References