Out-of-bounds Read in Codechild Xml::bare

CVE-2026-57074

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offset…

Vulnerability class: Buffer Overflow

Affected products

Weakness classification (CWE)

References