CVE-2025-40914

Published: Jun 11, 2025

Modified: Jun 11, 2025

PUBLISHED

Description

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.

Vendor	Product	Versions
MIK	CryptX	affected `0.002 - <= 0.086`

Weaknesses (CWE)

CWE-1395

References

https://www.cve.org/CVERecord?id=CVE-2023-36328

https://github.com/libtom/libtommath/pull/546

https://github.com/advisories/GHSA-j3xv-6967-cv88

https://metacpan.org/release/MIK/CryptX-0.086/source/src/ltm/bn_mp_grow.c

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-40914

Description

Affected Products

Weaknesses (CWE)

References