TI-2024-13025 CVE-2024-14031 · GHSA-hhqv-q79g-jgfm
Out-of-bounds write in YVES Sereal::Encoder
Priority LOW 37
Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.
No YVES vulnerabilities are listed in CISA KEV.
3 records
Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.
Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.
Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input.