CVE-2026-2588

Опубликовано: 23 фев. 2026

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems.

Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems size_t is typically 32-bits while an unsigned long long is at least 64-bits.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:timlegge:crypt\:\:nacl\:\:sodium:*:*:*:*:*:perl:*:*

Версия до 2.001 (включая)

EPSS

Процентиль: 17%

0.00054

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVE-2026-2588

CVSS3: 9.1

debian

около 1 месяца назад

Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer ove ...

GHSA-8gq5-mm3m-7h4x

CVSS3: 9.1

github

около 1 месяца назад

Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems size_t is typically 32-bits while an unsigned long long is at least 64-bits.

EPSS

Процентиль: 17%

0.00054

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-190