What’s Vulnerable › Vulnerabilities

CVE-2026-107794: ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-10 · updated 2026-10-16
• Weakness: CWE-191

Description

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with 2^32 slots, leading to memory exhaustion. Note that a similar issue was fixed in ExtUtils::Typemaps::STL::Vector version 1.05.

Affected products

• ExtUtils-Typemaps-Default: before 1.07 — fixed in 1.07

How to fix

Upgrade to a fixed version: ExtUtils-Typemaps-Default 1.07. Check the vendor advisory for mitigations.

References

• https://metacpan.org/release/SMUELLER/ExtUtils-Typemaps-Default-1.07/changes
• https://rt.cpan.org/Public/Bug/Display.html?id=91213
• https://www.cve.org/CVERecord?id=CVE-2013-10076

Get alerted when CVE-2026-107794 or the next vulnerability affects your stack