CVE-2025-40929: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cpanel::JSON::XSto a version that resolves this vulnerability.Fixed in 4.40
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40929?
CVE-2025-40929 is considered a high severity vulnerability due to its potential to cause a denial-of-service attack.
How do I fix CVE-2025-40929?
To fix CVE-2025-40929, upgrade Cpanel::JSON::XS to version 4.40 or later.
What impact does CVE-2025-40929 have on applications?
CVE-2025-40929 can result in a segmentation fault when parsing crafted JSON, leading to application crashes.
Which versions of Cpanel::JSON::XS are affected by CVE-2025-40929?
CVE-2025-40929 affects all versions of Cpanel::JSON::XS prior to 4.40.
What type of attacks can CVE-2025-40929 facilitate?
CVE-2025-40929 can facilitate denial-of-service attacks by causing applications to crash.