CVE-2020-10543
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Published Jun 5, 2020 · updated Oct 14, 2026 · perl perl
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Jun 5, 2020 · NIST NVD
Detected
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Oct 14, 2026 · NIST NVD
Updated
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Affected
- cpe fedoraproject/fedora31
- cpe opensuse/leap15.1
- cpe oracle/communications billing and revenue management12.0.0.2.0
- cpe oracle/communications billing and revenue management12.0.0.3.0
- cpe oracle/communications diameter signaling routerversion unspecified
- cpe oracle/communications eagle application processorversion unspecified
- cpe oracle/communications eagle lnp application processor10.1
- cpe perl/perlversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2020-10543
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2020-10543
30-day exploitation probability 11.3%
first.org - NIST NVDVulnerability recordCVE-2020-10543
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
nvd.nist.gov