CVE-2026-58101CWE-476

CVE-2026-58101

High · published July 14, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference.

X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds.

A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-07-14T03:16Z
Affected products (1)
ProductVersionsFixed in
jonasbn/crypt\< 2.1.32.1.3
References (2)
https://github.com/dsully/perl-crypt-openssl-x509/commit/4c1e2370556097c253ae27abe9e1097ea377fbd2.patch · 9b29abf9-4ab0-4765-b253-1875cd9b441ehttps://metacpan.org/release/JONASBN/Crypt-OpenSSL-X509-2.1.3/source/Changes.md · 9b29abf9-4ab0-4765-b253-1875cd9b441e
EPSS history
Timeline
  • 13 JUL 22:17Z
    Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference
    cvelistv5