{"id":"CVE-2013-10076","revision":"8034346e6ccf4a6abc0a2c29f8e779c5","records":[{"revision":"8034346e6ccf4a6abc0a2c29f8e779c5","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2013-10076","aliases":[],"title":"ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list","description":"ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list.\n\nThe OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with 2^32 slots, leading to memory exhaustion.","state":0,"publishedAt":"2026-10-10T12:44:48.076+00:00","modifiedAt":"2026-10-16T15:42:48.709+00:00","affected":[{"ecosystem":"https://cpan.org/modules","name":"ExtUtils-Typemaps-Default","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"collectionURL\": \"https://cpan.org/modules\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"modules\": [\n                        \"ExtUtils::Typemaps::STL::Vector\"\n                    ],\n                    \"packageName\": \"ExtUtils-Typemaps-Default\",\n                    \"packageURL\": \"pkg:cpan/ExtUtils-Typemaps-Default\",\n                    \"programFiles\": [\n                        \"lib/ExtUtils/Typemaps/STL/Vector.pm\"\n                    ],\n                    \"repo\": \"https://github.com/tsee/extutils-typemap-default\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"1.05\",\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://metacpan.org/release/SMUELLER/ExtUtils-Typemaps-Default-1.05/changes","https://rt.cpan.org/Public/Bug/Display.html?id=91213","https://github.com/tsee/extutils-typemap-default/commit/0eb696b75afcfedbf87a72e11d44d98110863934.patch"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2013-10076","license":"CVE Program Terms of Use","key":"cve-program:CVE-2013-10076","identifiers":["CVE-2013-10076"]},"retained":false,"historicalAffected":[]}],"coverage":[]}