Advisory CVE-2026-107794, released by the CPAN Security Group and relayed on an open source security mailing list on October 10, 2026, describes a problem in the ExtUtils-Typemaps-Default distribution. According to the text, versions of the ExtUtils::Typemaps::STL::List module for Perl prior to 1.07 allocate a 32 GiB array when processing an empty list. The received text is an automatic translation of the feed content, so technical terms should be checked against the original source. The advisory states the range of affected versions, but this summary does not describe exploitation details or severity scores. To read the full text, use the oss-sec list and the MetaCPAN distribution page cited by the CPAN Security Group. If your project depends on Perl and on C++ binding generators that use this module, check whether any transitive dependency is at a version earlier than 1.07.
Cyber ·
CVE-2026-107794: ExtUtils::Typemaps::STL::List allocates 32 GiB array for empty list
Security advisory from the CPAN Security Group on versions of ExtUtils::Typemaps::STL::List for Perl prior to 1.07, which allocate a 32 GiB array when processing an empty list. The advisory was published on October 10, 2026.
Rota Nacional
Bring privacy into your workflow.
30 days, no card, with a starting quota. After that, Pix credit from R$ 10,00.