CVE-2026-57433
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
A signed integer overflow vulnerability in Storable versions before 3.41 for Perl occurs when deserializing a crafted SX_HOOK record. The retrieve_hook_common function reads a signed 32-bit item count, and adding one to I32_MAX wraps it to a negative value.
Risk Assessment
An attacker can supply a crafted blob to the thaw or retrieve function, causing a panic and aborting deserialization, leading to a denial of service (DoS) in Perl applications using Storable to process untrusted data.
Recommendation
Immediately update the Storable library to version 3.41 or later. If an update is not possible, avoid deserializing untrusted data using the thaw or retrieve functions.
Original NVD description (English source)
Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value. A crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.