TI-2026-41370 Aliases CVE-2026-57433 GHSA-r969-gf4c-xqf7

Integer overflow in HAARG Storable

MEDIUM 49CWE-190Published 2026-07-13 · Updated 2026-07-14

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-190 and the CVSS impact.

Summary

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value. A crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00475 41st percentileScored 2026-11-07

Fix Fixed Storable (HAARG): 3.41

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
HAARG	Storable	before 3.41	3.41	Patch available	CNA

Storable VendorHAARG Affected before 3.41 Fixed in 3.41 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:nwclark:storable::::::perl::*	before 3.41	Vulnerable	NWCLARK

cpe:2.3:a:nwclark:storable:*:*:*:*:*:perl:*:* Versions before 3.41 Vulnerable ·NWCLARK

Remediation

Fix · CNA Storable (HAARG) Fixed in 3.41

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 1 product

Red Hat Hardened Images

Timeline

2026-10-02 Threatist record created from CVE-2026-57433
2026-10-03 Alias added: GHSA-r969-gf4c-xqf7

References

Patch 2

TI-2026-06134 HTTP response splitting in HAARG HTTP::Tiny CVSS 3.1MEDIUM 6.5
TI-2026-06141 Insufficiently protected credentials in HAARG HTTP::Tiny CVSS 3.1HIGH 7.1
TI-2025-27315 Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences