CVE-2020-10878
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expressio
CVSS
8.6
High
EPSS
4.9%
p92
KEV
—
Exploit Today
28
0-100
Published: Jun 5, 2020 · Last modified: Oct 14, 2026 · CWE-190
4.9%EPSS · 30 days4.9%
2026-10-172026-11-13
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html
- github.comhttps://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod
- github.comhttps://github.com/Perl/perl5/compare/v5.30.2...v5.30.3
- github.comhttps://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8
- github.comhttps://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/
- security.gentoo.orghttps://security.gentoo.org/glsa/202006-03
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20200611-0001/
- www.oracle.comhttps://www.oracle.com//security-alerts/cpujul2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuApr2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2022.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2022.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2021.html
- lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html
- github.comhttps://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod
- github.comhttps://github.com/Perl/perl5/compare/v5.30.2...v5.30.3
- github.comhttps://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8
- github.comhttps://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1291353.7 LOW—
——0picoquic before 2026.11.05.3e2e3d3 contains an integer overflow vulnerability in picoquic_decode_time_stamp_frame() that allows remote QUIC peers to corrupt stored timestamps by sending oversized TIME_STAMP values. Attackers on connections negotiating the TIME_STAMP extension can send large values shifted by ack_delay_exponent to wrap the result, corrupting RTT and bandwidth estimation and degrading congestion control.1dCVE-2026-109094——
——0A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org xwayland before 24.1.15 and X Server before 21.1.26 on 32bit systems could be used by authenticated clients to crash the X server.2dCVE-2026-1075248.8 HIG—
——0Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service.2dCVE-2026-1075238.7 HIG—
——0Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service.2dCVE-2026-109095——
——0A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data.2dCVE-2026-103645—6.7%
——2An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.2d