CVE-2026-57074 in XML::Bare
Resumen
por MITRE • 2026-07-16
XML::Bare versions through 0.53 for Perl have an unbounded character lookahead.
The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offsets are within the buffer.
Truncated strings such as "<a/" can trigger an out-of-bounds read.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.