Approved changes feed: RSS · Atom
cpe:2.3:a:timlegge:crypt::nacl::sodium:*:*:*:*:*:*:*:*
part: a version: * update: nacl
| Vendor | Timlegge (57ca7c5a-ff25-528a-a420-4474ee60361c) |
|---|---|
| Product | Crypt (53f67b2d-c54e-58fc-9f3d-602f261ea6a4) |
| Edition | * |
| Language | sodium |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-30909 |
vulnerable | 2026-06-08 07:57:14.525333 |
Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows
Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows.
bin2hex, encrypt, aes256gcm_encrypt_afternm and seal functions do not check that output size will be less than SIZE_MAX, which could lead to integer wraparound causing an undersized output buffer.
Encountering this issue is unlikely as the message length would need to be very large.
For bin2hex() the bin_len would have to be > SIZE_MAX / 2 For encrypt() the msg_len would need to be > SIZE_MAX - 16U For aes256gcm_encrypt_afternm() the msg_len would need to be > SIZE_MAX - 16U For seal() the enc_len would need to be > SIZE_MAX - 64U
Published: 2026-03-08T00:46:12.862Z
Updated: 2026-03-10T13:41:14.273Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-2588 |
vulnerable | 2026-06-08 07:55:17.259676 |
Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems
Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems.
Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems size_t is typically 32-bits while an unsigned long long is at least 64-bits.
Published: 2026-02-22T23:31:19.720Z
Updated: 2026-02-23T18:47:51.202Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.