Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.
2012-01-13T18:55:02.987
2025-04-11T00:51:21.963
Deferred
CVSSv2: 5.1 (MEDIUM)
AV:N/AC:H/Au:N/C:P/I:P/A:P
4.9
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | dan_kogai | encode_module | ≤ 2.43 | Yes |
| Application | dan_kogai | encode_module | 0.93 | Yes |
| Application | dan_kogai | encode_module | 0.94 | Yes |
| Application | dan_kogai | encode_module | 0.95 | Yes |
| Application | dan_kogai | encode_module | 0.96 | Yes |
| Application | dan_kogai | encode_module | 0.97 | Yes |
| Application | dan_kogai | encode_module | 0.98 | Yes |
| Application | dan_kogai | encode_module | 0.99 | Yes |
| Application | dan_kogai | encode_module | 1.00 | Yes |
| Application | dan_kogai | encode_module | 1.01 | Yes |
| Application | dan_kogai | encode_module | 1.10 | Yes |
| Application | dan_kogai | encode_module | 1.11 | Yes |
| Application | dan_kogai | encode_module | 1.20 | Yes |
| Application | dan_kogai | encode_module | 1.21 | Yes |
| Application | dan_kogai | encode_module | 1.25 | Yes |
| Application | dan_kogai | encode_module | 1.26 | Yes |
| Application | dan_kogai | encode_module | 1.28 | Yes |
| Application | dan_kogai | encode_module | 1.30 | Yes |
| Application | dan_kogai | encode_module | 1.31 | Yes |
| Application | dan_kogai | encode_module | 1.32 | Yes |
| Application | dan_kogai | encode_module | 1.33 | Yes |
| Application | dan_kogai | encode_module | 1.34 | Yes |
| Application | dan_kogai | encode_module | 1.40 | Yes |
| Application | dan_kogai | encode_module | 1.41 | Yes |
| Application | dan_kogai | encode_module | 1.42 | Yes |
| Application | dan_kogai | encode_module | 1.50 | Yes |
| Application | dan_kogai | encode_module | 1.51 | Yes |
| Application | dan_kogai | encode_module | 1.52 | Yes |
| Application | dan_kogai | encode_module | 1.53 | Yes |
| Application | dan_kogai | encode_module | 1.54 | Yes |
| Application | dan_kogai | encode_module | 1.55 | Yes |
| Application | dan_kogai | encode_module | 1.56 | Yes |
| Application | dan_kogai | encode_module | 1.57 | Yes |
| Application | dan_kogai | encode_module | 1.58 | Yes |
| Application | dan_kogai | encode_module | 1.59 | Yes |
| Application | dan_kogai | encode_module | 1.60 | Yes |
| Application | dan_kogai | encode_module | 1.61 | Yes |
| Application | dan_kogai | encode_module | 1.62 | Yes |
| Application | dan_kogai | encode_module | 1.63 | Yes |
| Application | dan_kogai | encode_module | 1.64 | Yes |
| Application | dan_kogai | encode_module | 1.65 | Yes |
| Application | dan_kogai | encode_module | 1.66 | Yes |
| Application | dan_kogai | encode_module | 1.67 | Yes |
| Application | dan_kogai | encode_module | 1.68 | Yes |
| Application | dan_kogai | encode_module | 1.69 | Yes |
| Application | dan_kogai | encode_module | 1.70 | Yes |
| Application | dan_kogai | encode_module | 1.71 | Yes |
| Application | dan_kogai | encode_module | 1.72 | Yes |
| Application | dan_kogai | encode_module | 1.73 | Yes |
| Application | dan_kogai | encode_module | 1.74 | Yes |
| Application | dan_kogai | encode_module | 1.75 | Yes |
| Application | dan_kogai | encode_module | 1.76 | Yes |
| Application | dan_kogai | encode_module | 1.77 | Yes |
| Application | dan_kogai | encode_module | 1.78 | Yes |
| Application | dan_kogai | encode_module | 1.79 | Yes |
| Application | dan_kogai | encode_module | 1.80 | Yes |
| Application | dan_kogai | encode_module | 1.81 | Yes |
| Application | dan_kogai | encode_module | 1.82 | Yes |
| Application | dan_kogai | encode_module | 1.83 | Yes |
| Application | dan_kogai | encode_module | 1.84 | Yes |
| Application | dan_kogai | encode_module | 1.85 | Yes |
| Application | dan_kogai | encode_module | 1.86 | Yes |
| Application | dan_kogai | encode_module | 1.87 | Yes |
| Application | dan_kogai | encode_module | 1.88 | Yes |
| Application | dan_kogai | encode_module | 1.89 | Yes |
| Application | dan_kogai | encode_module | 1.90 | Yes |
| Application | dan_kogai | encode_module | 1.91 | Yes |
| Application | dan_kogai | encode_module | 1.92 | Yes |
| Application | dan_kogai | encode_module | 1.93 | Yes |
| Application | dan_kogai | encode_module | 1.94 | Yes |
| Application | dan_kogai | encode_module | 1.95 | Yes |
| Application | dan_kogai | encode_module | 1.96 | Yes |
| Application | dan_kogai | encode_module | 1.97 | Yes |
| Application | dan_kogai | encode_module | 1.98 | Yes |
| Application | dan_kogai | encode_module | 1.99 | Yes |
| Application | dan_kogai | encode_module | 2.0 | Yes |
| Application | dan_kogai | encode_module | 2.01 | Yes |
| Application | dan_kogai | encode_module | 2.02 | Yes |
| Application | dan_kogai | encode_module | 2.03 | Yes |
| Application | dan_kogai | encode_module | 2.04 | Yes |
| Application | dan_kogai | encode_module | 2.05 | Yes |
| Application | dan_kogai | encode_module | 2.06 | Yes |
| Application | dan_kogai | encode_module | 2.07 | Yes |
| Application | dan_kogai | encode_module | 2.08 | Yes |
| Application | dan_kogai | encode_module | 2.09 | Yes |
| Application | dan_kogai | encode_module | 2.10 | Yes |
| Application | dan_kogai | encode_module | 2.11 | Yes |
| Application | dan_kogai | encode_module | 2.12 | Yes |
| Application | dan_kogai | encode_module | 2.13 | Yes |
| Application | dan_kogai | encode_module | 2.14 | Yes |
| Application | dan_kogai | encode_module | 2.15 | Yes |
| Application | dan_kogai | encode_module | 2.16 | Yes |
| Application | dan_kogai | encode_module | 2.17 | Yes |
| Application | dan_kogai | encode_module | 2.18 | Yes |
| Application | dan_kogai | encode_module | 2.19 | Yes |
| Application | dan_kogai | encode_module | 2.20 | Yes |
| Application | dan_kogai | encode_module | 2.21 | Yes |
| Application | dan_kogai | encode_module | 2.22 | Yes |
| Application | dan_kogai | encode_module | 2.23 | Yes |
| Application | dan_kogai | encode_module | 2.24 | Yes |
| Application | dan_kogai | encode_module | 2.25 | Yes |
| Application | dan_kogai | encode_module | 2.26 | Yes |
| Application | dan_kogai | encode_module | 2.27 | Yes |
| Application | dan_kogai | encode_module | 2.28 | Yes |
| Application | dan_kogai | encode_module | 2.29 | Yes |
| Application | dan_kogai | encode_module | 2.30 | Yes |
| Application | dan_kogai | encode_module | 2.31 | Yes |
| Application | dan_kogai | encode_module | 2.32 | Yes |
| Application | dan_kogai | encode_module | 2.33 | Yes |
| Application | dan_kogai | encode_module | 2.34 | Yes |
| Application | dan_kogai | encode_module | 2.35 | Yes |
| Application | dan_kogai | encode_module | 2.36 | Yes |
| Application | dan_kogai | encode_module | 2.37 | Yes |
| Application | dan_kogai | encode_module | 2.38 | Yes |
| Application | dan_kogai | encode_module | 2.39 | Yes |
| Application | dan_kogai | encode_module | 2.40 | Yes |
| Application | dan_kogai | encode_module | 2.41 | Yes |
| Application | dan_kogai | encode_module | 2.42 | Yes |
| Application | perl | perl | ≤ 5.14.2 | Yes |
| Application | perl | perl | 5.8.1 | Yes |
| Application | perl | perl | 5.8.2 | Yes |
| Application | perl | perl | 5.8.3 | Yes |
| Application | perl | perl | 5.8.4 | Yes |
| Application | perl | perl | 5.8.5 | Yes |
| Application | perl | perl | 5.8.6 | Yes |
| Application | perl | perl | 5.8.7 | Yes |
| Application | perl | perl | 5.8.8 | Yes |
| Application | perl | perl | 5.8.9 | Yes |
| Application | perl | perl | 5.8.10 | Yes |
| Application | perl | perl | 5.9.2 | Yes |
| Application | perl | perl | 5.10 | Yes |
| Application | perl | perl | 5.10.0 | Yes |
| Application | perl | perl | 5.10.0 | Yes |
| Application | perl | perl | 5.10.0 | Yes |
| Application | perl | perl | 5.10.1 | Yes |
| Application | perl | perl | 5.10.1 | Yes |
| Application | perl | perl | 5.10.1 | Yes |
| Application | perl | perl | 5.11.0 | Yes |
| Application | perl | perl | 5.11.1 | Yes |
| Application | perl | perl | 5.11.2 | Yes |
| Application | perl | perl | 5.11.3 | Yes |
| Application | perl | perl | 5.11.4 | Yes |
| Application | perl | perl | 5.11.5 | Yes |
| Application | perl | perl | 5.12.0 | Yes |
| Application | perl | perl | 5.12.0 | Yes |
| Application | perl | perl | 5.12.0 | Yes |
| Application | perl | perl | 5.12.0 | Yes |
| Application | perl | perl | 5.12.0 | Yes |
| Application | perl | perl | 5.12.0 | Yes |
| Application | perl | perl | 5.12.0 | Yes |
| Application | perl | perl | 5.12.1 | Yes |
| Application | perl | perl | 5.12.1 | Yes |
| Application | perl | perl | 5.12.1 | Yes |
| Application | perl | perl | 5.12.2 | Yes |
| Application | perl | perl | 5.12.2 | Yes |
| Application | perl | perl | 5.12.3 | Yes |
| Application | perl | perl | 5.12.3 | Yes |
| Application | perl | perl | 5.12.3 | Yes |
| Application | perl | perl | 5.12.3 | Yes |
| Application | perl | perl | 5.13.0 | Yes |
| Application | perl | perl | 5.13.1 | Yes |
| Application | perl | perl | 5.13.2 | Yes |
| Application | perl | perl | 5.13.3 | Yes |
| Application | perl | perl | 5.13.4 | Yes |
| Application | perl | perl | 5.13.5 | Yes |
| Application | perl | perl | 5.13.6 | Yes |
| Application | perl | perl | 5.13.7 | Yes |
| Application | perl | perl | 5.13.8 | Yes |
| Application | perl | perl | 5.13.9 | Yes |
| Application | perl | perl | 5.13.10 | Yes |
| Application | perl | perl | 5.13.11 | Yes |
| Application | perl | perl | 5.14.0 | Yes |
| Application | perl | perl | 5.14.0 | Yes |
| Application | perl | perl | 5.14.0 | Yes |
| Application | perl | perl | 5.14.0 | Yes |
| Application | perl | perl | 5.14.1 | Yes |