Heap-based Buffer Overflow in Perl's Nested Regular Expression Quantifiers

Heap-based Buffer Overflow in Perl's Nested Regular Expression Quantifiers

CVE-2020-10543 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.

Learn more about our Web Application Penetration Testing UK.