CVE-2026-57433: Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record
Last updated 9 September 2026
Other sources
Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.38.2-514 - Upgrade
Upgrade
debian/perlto a version that resolves this vulnerability.Fixed in 5.42.3-1 - Upgrade
Upgrade
Perl Storableto a version that resolves this vulnerability.Fixed in 3.41Patch CVE-2026-57433
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57433?
CVE-2026-57433 has a risk rating of 26, indicating a high severity vulnerability.
How do I fix CVE-2026-57433?
To fix CVE-2026-57433, upgrade to Storable version 3.41 or later.
What type of vulnerability is CVE-2026-57433?
CVE-2026-57433 is categorized as an integer overflow vulnerability.
What causes the vulnerability in CVE-2026-57433?
The vulnerability in CVE-2026-57433 is caused by a signed integer overflow when deserializing a crafted SX_HOOK record.
What software is affected by CVE-2026-57433?
CVE-2026-57433 affects Storable versions before 3.41 for Perl.