{"id":"CVE-2026-41565","aliases":["DEBIAN-CVE-2026-41565","EUVD-2026-32906","GHSA-4p3p-7392-hjw4","UBUNTU-CVE-2026-41565","openSUSE-SU-2026:10968-1","openSUSE-SU-2026:20936-1"],"status":"published","title":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers","description":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.\n\nThe gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three.\n\nAny caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00469,"percentile":0.40864,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-121"],"published":"2026-05-28T14:13:19Z","modified":"2026-10-28T02:31:04Z","fixes":[{"ecosystem":"Debian:14","package":"libcryptx-perl","fixed_in":["0.089-1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"perl-CryptX","fixed_in":["0.89.0-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libcryptx-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.077-1","0.078-1","0.080-1","0.080-2","0.081-1","0.081-2","0.082-1","0.082.001-1","0.084-1","0.085-1","0.087-1","0.087-2","0.088-1","0.089-1","0.090-1","0.090-1~bpo13+1","0.091-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libcryptx-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.085-1","0.085-1+deb13u1","0.087-1","0.087-2","0.088-1","0.089-1","0.090-1","0.090-1~bpo13+1","0.091-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libcryptx-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.089-1"}]}],"versions":["0.085-1","0.087-1","0.087-2","0.088-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libcryptx-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.055-1","0.056-1","0.056-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libcryptx-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.064-1","0.064-1build1","0.066-1","0.067-1","0.067-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libcryptx-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.069-1build1","0.073-1","0.074-1","0.075-1","0.076-1","0.076-1build1","0.076-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libcryptx-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.078-1","0.080-1","0.080-2","0.080-2build1","0.080-2build2","0.080-2build3","0.080-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libcryptx-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.085-1","0.087-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libcryptx-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.087-1","0.089-1","0.090-1","0.090-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libcryptx-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.087-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"perl-CryptX","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.89.0-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"perl-CryptX","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.89.0-bp160.1.1"}]}],"bundled":2}],"products":[{"vendor":"mik","product":"cryptx"}],"references":[{"url":"https://github.com/DCIT/perl-CryptX/commit/57e69e541b0718ca8724c2f61514322a2d859bc1.patch","tags":["patch","fix","report"]},{"url":"https://github.com/DCIT/perl-CryptX/commit/7e56347d420aaf43b2ee1586f4a230492ccf1642.patch","tags":["patch","fix","report"]},{"url":"https://metacpan.org/release/MIK/CryptX-0.088_001","tags":["release-notes","advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2026/05/28/10","tags":["web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41565","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4p3p-7392-hjw4"},{"url":"https://cpan.org/modules","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41565.json","tags":["advisory"]},{"url":"https://github.com/DCIT/perl-CryptX","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-41565","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-41565","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41565","tags":["report"]},{"url":"https://lists.security.metacpan.org/cve-announce/msg/40477993/","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41565","tags":["web"]},{"url":"https://bugzilla.suse.com/1244472","tags":["report"]},{"url":"https://bugzilla.suse.com/1262697","tags":["report"]},{"url":"https://bugzilla.suse.com/1266804","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41564","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-41565","title":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers","description":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.\n\nThe gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three.\n\nAny caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.","status":"published","published":"2026-05-28T14:13:19.301Z","modified":"2026-05-29T15:53:39.53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T13:40:57.334596Z"}],"euvd":[{"id":"EUVD-2026-32906","description":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.\n\nThe gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three.\n\nAny caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.","status":"published","published":"2026-05-28T14:13:19Z","modified":"2026-05-29T15:53:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:21:00.772434Z"}],"ghsa":[{"id":"GHSA-4p3p-7392-hjw4","title":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD...","description":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.\n\nThe gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three.\n\nAny caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.","status":"published","published":"2026-05-28T18:30:30Z","modified":"2026-05-29T18:31:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:08:23.402135Z"}],"nvd":[{"id":"CVE-2026-41565","description":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.\n\nThe gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three.\n\nAny caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.","status":"published","published":"2026-05-28T16:16:22.343Z","modified":"2026-10-26T13:10:00.14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:12:21.244426Z"}],"osv":[{"id":"CVE-2026-41565","title":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers","description":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.\n\nThe gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three.\n\nAny caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.","status":"published","published":"2026-05-28T14:13:19.301Z","modified":"2026-10-28T02:31:04.800580533Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:45:03.764807Z"},{"id":"DEBIAN-CVE-2026-41565","description":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.  The gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three.  Any caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.","status":"published","published":"2026-05-28T16:16:22.343Z","modified":"2026-10-27T09:47:41.683496975Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"UBUNTU-CVE-2026-41565","description":"CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers. The gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authentication tag into a fixed 144-byte stack buffer (MAXBLOCKSIZE) without checking the supplied length. A longer tag overwrites the stack past the buffer. Version 0.088 added the clamp to gcm_decrypt_verify, and 0.088_001 added it to the other three. Any caller of an affected helper that forwards an attacker-controlled tag longer than the buffer can trigger the overflow.","status":"published","published":"2026-05-28T16:16:00Z","modified":"2026-10-17T12:58:14.895040784Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:18.393417Z"},{"id":"openSUSE-SU-2026:10968-1","title":"perl-CryptX-0.89.0-2.1 on GA media","description":"These are all security issues fixed in the perl-CryptX-0.89.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-08T00:00:00Z","modified":"2026-06-09T09:00:05.983973868Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:20936-1","title":"Security update for perl-CryptX","description":"This update for perl-CryptX fixes the following issues:\n\nChanges in perl-CryptX:\n\n- updated to 0.89.0 (0.089)\n   see /usr/share/doc/packages/perl-CryptX/Changes\n\n  0.089   2026-05-10\n          - new: Crypt::ASN1\n          - new: Crypt::AuthEnc::SIV\n          - new: Crypt::AuthEnc::XChaCha20Poly1305\n          - new: Crypt::Cipher::SM4\n          - new: Crypt::Digest::TurboSHAKE\n          - new: Crypt::Digest::KangarooTwelve\n          - new: Crypt::PK::Ed448\n          - new: Crypt::PK::X448\n          - new: Crypt::Stream::XChaCha\n          - new: Crypt::Stream::XSalsa20\n          - Crypt::PK::Ed25519 - new functions: sign_message_ctx, verify_message_ctx, sign_message_ph, verify_message_ph\n          - Crypt::Digest: object digest accessors now finalize the object; use reset() before reuse\n          - Crypt::Mac + Crypt::AuthEnc: finalized-object lifecycle is now enforced consistently\n          - security/hardening fixes across Digest/Mac/AuthEnc/Mode/Stream/PK/PRNG\n          - fixes related to wycheproof test suite\n          - documentation cleanup \u0026 improvements\n          - support for RFC 8702 RSA-PSS-SHAKE128/256 and ECDSA-SHAKE128/256\n          - support for FRP256v1 elliptic-curve\n          - bundled libtomcrypt update branch:develop (commit: 8b5af49b 2026-05-06)\n          - CVE-2026-41565 bsc#1266804\n\n  0.088   2026-04-23\n          - Crypt::KeyDerivation - new functions: pbkdf1_openssl, bcrypt_pbkdf, scrypt_pbkdf, argon2_pbkdf\n          - Crypt::Misc - new functions: random_v7uuid, is_uuid\n          - bundled libtomcrypt update branch:develop (commit: 2e441a17 2026-04-15)\n          - bundled libtommath update branch:develop (commit: ae40a87 2026-04-20)\n          - security fix CVE-2026-41564 https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6\n            bsc#1262697\n          - CVE-2026-41565 bsc#1266804\n","status":"published","published":"2026-06-10T11:48:58Z","modified":"2026-06-13T18:24:19.185662671Z","updated_at":"2026-11-02T16:58:41.885092Z"}]}}