Description
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING (or BIT STRING) attribute on a SAFEBAG, via info() or info_as_hash(), a heap out-of-bounds write would be triggered with remote-code-execution potential (RCE) due to a signed integer overflow in the size calculation passed to Renew().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
JONASBN Crypt::OpenSSL::PKCS12
Default version status: unaffected
0 to ≤ 1.94affected
References
- https://metacpan.org/release/JONASBN/Crypt-OpenSSL-PKCS12-1.95/view/Changes.md ↗
- https://github.com/dsully/perl-crypt-openssl-pkcs12/issues/55 ↗
- https://github.com/dsully/perl-crypt-openssl-pkcs12/issues/56 ↗
- https://github.com/dsully/perl-crypt-openssl-pkcs12/commit/b9d0469c6d8f5b5c6c2a45a3d0647a532b749397.patch ↗
- http://www.openwall.com/lists/oss-security/2026/05/17/5 ↗