CVE-2026-114629
Received Received - Intake

Buffer Overflow in Web::Simple for Perl

Publication date: 2026-10-24

Last updated on: 2026-10-24

Assigner: CPANSec

Description
Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters. Web::Dispatch::ParamParser::get_unpacked_body_from reads an application/x-www-form-urlencoded body using a single read call, with no cap and the return value ignored. Perl's read grows the buffer to the requested length before reading, so the declared Content-Length determines the allocation. An attacker can trigger this through any route whose dispatch specification has a % body-parameter match, such as sub (POST + %name=), sending a Content-Length far larger than the body actually sent. No authentication is involved.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-24
Last Modified
2026-10-24
Generated
2026-10-24
AI Q&A
2026-10-24
EPSS Evaluated
N/A
NVD
CVE-2026-114629
EUVD
EUVD-2026-109295

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-789 The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Web::Simple Perl module versions before 0.035. It involves improper handling of URL-encoded request bodies where the Content-Length header is used to allocate a buffer without proper size limits. Attackers can exploit this by sending a Content-Length value much larger than the actual body, causing excessive memory allocation and potential denial-of-service conditions.

Detection Guidance

Check Perl applications using Web::Simple versions before 0.035. Monitor for unusually large Content-Length headers in POST requests with % body parameters. Use network inspection tools to detect requests exceeding typical body sizes.

Impact Analysis

This vulnerability can lead to denial-of-service attacks by consuming excessive server memory. Attackers may send specially crafted requests with large Content-Length headers, causing the server to allocate more memory than intended. This can degrade performance or crash the application if memory limits are exceeded.

Mitigation Strategies

Upgrade Web::Simple to version 0.035 or later. Implement server-side size limits for POST request bodies. Review and restrict routes handling % body parameters. Monitor for suspicious large requests.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-114629. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart