CVE-2026-58101

HighCVSS 7.5

Published: 13/07/2026(UTC)Updated: 11/08/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

11th percentile - higher than 11% of all known CVEs

Summary

A vulnerability in the Crypt::OpenSSL::X509 library for Perl before version 2.1.3 causes denial of service (DoS) via NULL pointer dereference. The X509V3_EXT_d2i(ext) function returns NULL when parsing an extension's DER value fails, and helper functions (basicC, ia5string, auth_att) do not check the result before dereferencing. Additionally, keyid_data dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when parsing succeeds.

Risk Assessment

An attacker can supply an untrusted certificate with a crafted extension, causing a Perl process crash (SIGSEGV) when an affected helper is called, leading to application disruption.

Recommendation

Immediately upgrade the Crypt::OpenSSL::X509 library to version 2.1.3 or later. If an upgrade is not possible, avoid processing certificates from untrusted sources with the affected helper functions.

Other vulnerabilities in Crypt::OpenSSL::X509

CVE-2026-58102Critical
A vulnerability in the Crypt::OpenSSL::X509 library for Perl before version 2.1.3 allows a heap out-of-bounds read via a long certificate extension OID. Functions like extensions(), extensions_by_long_name(), extensions_by_oid(), and has_extension_oid() incorrectly use the full OID text length as the hash key length, causing a read past the fixed-size 129-byte buffer.

Original NVD description (English source)

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.