Security Advisory

CVE-2024-14030

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-31 11:31:08

Last updated 2026-04-01 16:29:33

Assigner CPANSec

State PUBLISHED

Description

Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Decoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.

← Browse all CVEs View on cve.org ↗