CVE-2026-2588: Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems
Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems.
Sodium.xs casts a STRLEN (sizet) to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems sizet is typically 32-bits while an unsigned long long is at least 64-bits.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2588?
CVE-2026-2588 is considered a high severity vulnerability due to its potential for integer overflow on 32-bit systems.
How do I fix CVE-2026-2588?
To fix CVE-2026-2588, upgrade Crypt::NaCl::Sodium to version 2.002 or later where the issue has been resolved.
What systems are affected by CVE-2026-2588?
CVE-2026-2588 affects 32-bit systems running Crypt::NaCl::Sodium versions through 2.001.
What might happen if CVE-2026-2588 is exploited?
Exploitation of CVE-2026-2588 could lead to unexpected behavior, including potential crashes or security breaches due to integer overflow.
Who is responsible for fixing the flaw in CVE-2026-2588?
The maintainers of the Crypt::NaCl::Sodium library are responsible for fixing the flaw in CVE-2026-2588 and releasing updated versions.