CVE-2026-57433
Critical · CVSS 9.8Storable (Perl module) — Signed integer overflow in deserialization (CWE-190)
- CVSS
- 9.8
- nvd
- EPSS
- 0.17%
- 7th pct
- KEV
- No
- Class
- other
- CWE-190
Description
Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value. A crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.
Search profile — drives PoC discovery
Symbols SX_HOOKretrieve_hook_commonav_extendI32_MAXthawretrieveSX_HOOK recorditem countsigned 32-bit
Keywords CVE-2026-57433StorablePerlSX_HOOKinteger overflowdeserializationretrieve_hook_commonav_extendthawsigned integer overflow
Versions: before 3.41
References
Status: enriched · ingested 2026-07-14T18:00:20.000Z · profiled 2026-07-15T00:30:20.000Z