CVE-2026-110752

Received Received - Intake

Memory Exhaustion in Text::CSV_XS Perl Module

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: CPANSec

Description

Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. fragment expands a row= or col= selector into an array with one element per selected index before it reads any data, and it does not clamp an explicit end column in a cell= selector to the row. Only the syntax and order of the ranges are checked, so row=1-400000000 on a two-line file allocates 400 million elements. An application that passes a request-supplied fragment to fragment or csv can be made to exhaust memory, which ends the process with an Out of memory error that eval cannot catch.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-16

Last Modified

2026-10-16

Generated

2026-10-17

AI Q&A

2026-10-17

EPSS Evaluated

N/A

NVD

CVE-2026-110752

EUVD

EUVD-2026-103192

Affected Vendors & Products

Vendor	Product	Version / Range
perl	text	to 1.65 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This vulnerability affects Text::CSV_XS versions before 1.65 for Perl. It allows memory exhaustion by processing RFC 7111 selectors in fragments. The fragment function expands a row or column selector into an array with one element per index before reading data, without clamping the end column to the actual row size. For example, a selector like row=1-400000000 on a two-line file would allocate 400 million elements, causing the application to run out of memory and crash.

Detection Guidance

This vulnerability can be detected by checking the version of Text::CSV_XS installed on your system. Run the command 'perl -MText::CSV_XS -e "print $Text::CSV_XS::VERSION"' to see the version. If it is below 1.65, the system is vulnerable.

Impact Analysis

If you use an affected version of Text::CSV_XS and process user-supplied fragments, an attacker could send a specially crafted fragment to trigger excessive memory allocation. This would cause your application to crash with an out-of-memory error that cannot be caught by eval, leading to denial of service.

Compliance Impact

This vulnerability could indirectly impact compliance with standards like GDPR or HIPAA by causing service disruptions due to memory exhaustion. If an application crashes from an Out of memory error, it may fail to process or protect sensitive data, potentially violating availability requirements in these regulations.

Mitigation Strategies

Immediately update Text::CSV_XS to version 1.65 or later using your package manager, such as 'cpan Text::CSV_XS' or 'cpanm Text::CSV_XS'. Avoid passing untrusted fragments to the module in your applications.

Hi! I’m here to help you understand CVE-2026-110752. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70