AZL-80196
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-80196.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-80196
- Upstream
- Published
- 2026-03-19T12:16:17Z
- Modified
- 2026-08-29T05:27:27Z
- Summary
- CVE-2006-10003 affecting package perl-XML-Parser for versions less than 2.47-2
- Details
-
XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in stserialstack.
In the case (stackptr == stacksize - 1), the stack will NOT be expanded. Then the new value will be written at location (++stackptr), which equals stacksize and therefore falls just outside the allocated buffer.
The bug can be observed when parsing an XML file with very deep element nesting
- References