CVE-2025-40912Libcryptx-perl vulnerability

6 documents5 sources
Severity
9.8CRITICALNVD
OSV9.1
EPSS
0.4%
top 38.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 11
Latest updateMar 26

Description

CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode. CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

debiandebian/libcryptx-perl< libcryptx-perl 0.066-1 (bookworm)

🔴Vulnerability Details

3
OSV
libcryptx-perl vulnerabilities2026-03-26
OSV
CVE-2025-40912: CryptX for Perl before version 02025-06-11
GHSA
GHSA-w3qg-5chj-8g9g: CryptX for Perl before version 02025-06-11

📋Vendor Advisories

2
Ubuntu
CryptX vulnerabilities2026-03-26
Debian
CVE-2025-40912: libcryptx-perl - CryptX for Perl before version 0.065 contains a dependency that may be susceptib...2025
CVE-2025-40912 — Debian Libcryptx-perl vulnerability | cvebase