CVE-2025-40914

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-40914

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40914.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2025-40914

Aliases

CVE-2025-40913
GHSA-j3xv-6967-cv88

Downstream

USN-8128-1

Related

openSUSE-SU-2025:15259-1

Published

2025-06-11T14:06:53Z

Modified

2026-10-22T10:33:37Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

Details

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow.

CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.

Database specific

{
    "cna_assigner": "CPANSec",
    "cwe_ids": [
        "CWE-1395"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40914.json"
}

References

Affected packages

Git / github.com/dcit/perl-cryptx

Affected ranges

Type

GIT

Repo

https://github.com/dcit/perl-cryptx

Events

Introduced

Last Affected

5e998cfa96353592ff239ed0689c53756f8e9dd3

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0.002"
                },
                {
                    "last_affected": "0.086"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        }
    ]
}

Affected versions

v0.*

v0.022

v0.023

v0.024

v0.025

v0.026

v0.029

v0.030

v0.031

v0.032

v0.033

v0.034

v0.035

v0.036

v0.037

v0.038

v0.039

v0.040

v0.041

v0.042

v0.043

v0.044

v0.045

v0.046

v0.047

v0.048

v0.049

v0.050

v0.051

v0.052

v0.053

v0.054

v0.055

v0.056

v0.057

v0.058

v0.059

v0.060

v0.061

v0.062

v0.063

v0.064

v0.065

v0.066

v0.067

v0.068

v0.069

v0.070

v0.071

v0.072

v0.073

v0.074

v0.075

v0.076

v0.077

v0.078

v0.079

v0.080

v0.081

v0.082

v0.083

v0.084

v0.085

v0.086

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40914.json"