{"affected":[{"defaultStatus":"unaffected","ecosystem":"cpan","packageName":"JSON-XS","product":"","source":"CNA: CPANSec","vendor":"","versions":[{"lessThan":"4.05","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-124536","cwes":["CWE-770"],"description":"JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past max_size after a NUL byte in incr_parse.\n\nThe parser appends each chunk to its buffer and compares max_size with how far it has progressed, not with the buffer length. It treats a NUL byte as the end of the input, so a NUL within the first max_size bytes keeps it short of the limit. The buffer keeps growing, and incr_skip cannot remove the NUL.\n\nA peer streaming data to an incr_parse consumer can exhaust process memory regardless of max_size.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1794657082977,"publishedAt":1794657082977,"references":[{"source":"CNA: CPANSec","tags":["release-notes"],"url":"https://metacpan.org/release/MLEHMANN/JSON-XS-4.05/changes"}],"remediation":[{"kind":"fix","source":"CNA: CPANSec","text":"Upgrade to JSON-XS 4.05 or later."}],"revision":"275c39e22fb3e8698caac69cef614157f8d678201cb0d364ce883296363a774d","sources":[{"modifiedAt":1794657082977,"name":"CNA: CPANSec","retrievedAt":1794658098916,"url":"https://www.cve.org/CVERecord?id=CVE-2026-124536"}],"ssvc":null,"status":"published","title":"JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past max_size after a NUL byte in incr_parse","updatedAt":1794658098916}