CVE-2025-40914
Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow
Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.
Reserved 2025-04-16 | Published 2025-06-11 | Updated 2025-06-11 | Assigner CPANSecCWE-1395 Dependency on Vulnerable Third-Party Component
www.cve.org/CVERecord?id=CVE-2023-36328
github.com/libtom/libtommath/pull/546
github.com/advisories/GHSA-j3xv-6967-cv88
metacpan.org/...MIK/CryptX-0.086/source/src/ltm/bn_mp_grow.c
Support options
