Medium severity5.6NVD Advisory· Published Sep 8, 2025· Updated Apr 15, 2026
CVE-2025-40929
CVE-2025-40929
Description
Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- osv-coords2 versionspkg:rpm/opensuse/perl-Cpanel-JSON-XS&distro=openSUSE%20Tumbleweedpkg:rpm/suse/perl-Cpanel-JSON-XS&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7
< 4.400.0-1.1+ 1 more
- (no CPE)range: < 4.400.0-1.1
- (no CPE)range: < 4.380.0-150700.3.3.1
Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2025/09/08/1nvd
- github.com/rurban/Cpanel-JSON-XS/commit/378236219eaa35742c3962ecbdee364903b0a1f2.patchnvd
- lists.debian.org/debian-lts-announce/2025/09/msg00034.htmlnvd
- metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.39/source/XS.xsnvd
- metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.40/changesnvd
News mentions
0No linked articles in our index yet.