{"uuid": "8ede203e-6439-41aa-bbfe-ec7d7dc8d3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107373", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117416717267217779", "content": "CVE-2026-107373 ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument.\nThe typemap uses\n    $var = std::string( SvPV_nolen($arg), SvCUR($arg) )\nHowever, evaluation order for C++ arguments is not specified, and some compilers may produce code that evalutes SvCUR($arg) first.\nWhen $arg is not a string (for example, an interger, number or a reference) then SvCUR will return an invalid value, and the program may abort or segfault.\nhttps://www.cve.org/CVERecord?id=CVE-2026-107373https://metacpan.org/release/SMUELLER/ExtUtils-Typemaps-Default-1.06/changeshttps://github.com/tsee/extutils-typemap-default/commit/a6b9c298b34ddadc582961403e715d292f82a22dhttps://rt.cpan.org/Public/Bug/Display.html?id=94110https://www.cve.org/CVERecord?id=CVE-2026-80490#CVE_2026_107373#bot", "creation_timestamp": "2026-10-10T12:55:21.640378Z"}