CVE-2022-48522

Description

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

Affected Platforms

Weakness Type

CWE-787

References

• https://github.com/Perl/perl5/blob/79a7b254d85a10b65126ad99bf10e70480569d68/sv.c…
• https://security.netapp.com/advisory/ntap-20230915-0008/
• https://github.com/Perl/perl5/blob/79a7b254d85a10b65126ad99bf10e70480569d68/sv.c…
• https://security.netapp.com/advisory/ntap-20230915-0008/