Skip to content
Critical Heap Buffer Overflow Vulnerabilities in Fedora Perl Packages

Critical Heap Buffer Overflow Vulnerabilities in Fedora Perl Packages

First seen 5 Aug 2026, 08:01 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 6, 2026 at 07:23 UTC
  • •Critical heap buffer overflow vulnerabilities identified in Fedora Perl packages.
  • •CVE-2026-8376 and CVE-2026-57432 can lead to information disclosure and system compromise.
  • •Users must update to Perl version 5.42.3 to mitigate these vulnerabilities.

Fedora has issued advisories for critical heap buffer overflow vulnerabilities affecting Perl packages. The vulnerabilities, identified as CVE-2026-8376 and CVE-2026-57432, can lead to information disclosure and potential system compromise. The issues arise from flaws in 32-bit builds of Perl, impacting various modules including perl-Devel-Cover and perl-PAR. Users are advised to update to Perl version 5.42.3 to mitigate these risks. The vulnerabilities were published on May 25, 2026, and July 13, 2026, respectively. Administrators are urged to audit Linux privileges to limit potential damage. The updates can be installed via the 'dnf' package manager. Immediate action is recommended to ensure system security.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 46d ago How this analysis works

Timeline

2026-05-25
CVE-2026-8376 published
Heap buffer overflow vulnerability in Perl affecting 32-bit builds disclosed, allowing potential information leakage.
Linuxsecurity
2026-07-13
CVE-2026-57432 published
Information disclosure vulnerability via integer overflow in Perl's pack/unpack operations disclosed.
Linuxsecurity
2026-08-05
Fedora issues security advisories
Fedora released advisories for critical vulnerabilities in Perl packages, urging users to update to version 5.42.3.
Linuxsecurity

More articles in this cluster (5)

Following this threat?

Track Fedora and CVE-2026-57432 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3