https://seclists.org/oss-sec/2025/q3/154: CVE-2025-40929: Cpanel::JSON::XS befoversion 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

CVE-2025-40929 has a severity rating that indicates it can lead to a denial-of-service attack due to an integer buffer overflow.

To fix CVE-2025-40929, upgrade Cpanel::JSON::XS to version 4.40 or later.

CVE-2025-40929 affects the Cpanel-JSON-XS software prior to version 4.40.

CVE-2025-40929 is an integer buffer overflow vulnerability that can cause a segmentation fault.

The impact of CVE-2025-40929 includes potential denial-of-service attacks when parsing crafted JSON.

Published Sep 8, 2025

Updated

Affected Software

1 affected component

Cpanel Cpanel-JSON-XS<4.40

CVE-2025-40929 has a severity rating that indicates it can lead to a denial-of-service attack due to an integer buffer overflow.

To fix CVE-2025-40929, upgrade Cpanel::JSON::XS to version 4.40 or later.

CVE-2025-40929 affects the Cpanel-JSON-XS software prior to version 4.40.

CVE-2025-40929 is an integer buffer overflow vulnerability that can cause a segmentation fault.

The impact of CVE-2025-40929 includes potential denial-of-service attacks when parsing crafted JSON.