CVE-2026-58102
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability in the Crypt::OpenSSL::X509 library for Perl before version 2.1.3 allows a heap out-of-bounds read via a long certificate extension OID. Functions like extensions(), extensions_by_long_name(), extensions_by_oid(), and has_extension_oid() incorrectly use the full OID text length as the hash key length, causing a read past the fixed-size 129-byte buffer.
Risk Assessment
An attacker can exploit this vulnerability to read heap memory, potentially exposing sensitive information such as private keys or other process data.
Recommendation
Immediately update Crypt::OpenSSL::X509 to version 2.1.3 or later. If an update is not possible, avoid using the vulnerable functions on untrusted certificates.
Original NVD description (English source)
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected.