AZL-109466
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109466.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-109466
- Upstream
- Published
- 2025-10-16T01:15:32Z
- Modified
- 2026-10-21T05:33:18Z
- Summary
- CVE-2025-11683 affecting package perl-YAML-Syck 1.34-1
- Details
-
YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure
Missing null terminators in token.c leads to but-of-bounds read which allows adjacent variable to be read
The issue is seen with complex YAML files with a hash of all keys and empty values. There is no indication that the issue leads to accessing memory outside that allocated to the module.
- References