PEVANS Socket vulnerabilities

Latest PEVANS Socket CVEs

Newest publication first

1. CVE-2026-12087 Socket versions before 2.041 for Perl have an out-of-bounds heap read

   Published 2026-06-15

   Critical·CVSS 9.1 EPSS 0.59%

   Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both add...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.