Crypt::OpenSSL::X509 vulnerabilities

2 known vulnerabilities in Crypt::OpenSSL::X509 from Jonasbn. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Crypt::OpenSSL::X509: Out-of-bounds Read

  CVE-2026-58102Jul 13, 2026Jonasbn

  Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), th

• 7.5 High severity

  Crypt::OpenSSL::X509: NULL Pointer Dereference

  CVE-2026-58101Jul 13, 2026Jonasbn

  Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check