CVE-2025-40928: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JSON::XSto a version that resolves this vulnerability.Fixed in 4.04
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40928?
CVE-2025-40928 is classified as a medium severity vulnerability due to its potential to cause denial-of-service attacks.
How do I fix CVE-2025-40928?
To fix CVE-2025-40928, upgrade JSON::XS to version 4.04 or later.
What is the impact of CVE-2025-40928?
The impact of CVE-2025-40928 includes potential denial-of-service attacks due to an integer buffer overflow.
Which versions of JSON::XS are affected by CVE-2025-40928?
Versions of JSON::XS prior to 4.04 are affected by CVE-2025-40928.
How can CVE-2025-40928 be exploited?
CVE-2025-40928 can be exploited by crafting specific JSON inputs that trigger the buffer overflow, leading to a segmentation fault.