Out-of-bounds Read in Toddr Yaml::syck
CVE-2026-57075
YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64dec. The base64 decoder in the bundled libsyck indexes the 256-entry static table b64_xtable with a signed char, so an…
Vulnerability class: Buffer Overflow
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H.
Affected products
- Toddr Yaml::syck — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-57075?
- CVE-2026-57075 is a critical-severity vulnerability in Toddr Yaml::syck, classified under Out-of-bounds Read. CVSS score: 9.1/10. Published 2026-07-16.
- How severe is CVE-2026-57075?
- Critical severity. CVSS v3 base score is 9.1 out of 10.