High severity7.5OSV Advisory· Published Sep 8, 2025· Updated Jun 17, 2026

CVE-2025-40930

Description

JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pjuhasz/JSON SimdOSV2 versions
1.04, 1.05, 1.06, …+ 1 more
- (no CPE)range: 1.04, 1.05, 1.06, …
- (no CPE)range: <1.07
Perl Foundation/JSON::SIMDllm-create
Range: <1.07

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2025/09/08/3nvd
github.com/pjuhasz/JSON-SIMD/commit/9a87de7331c9fa5198cae404a83b17649cf7b918.patchnvd
metacpan.org/release/PJUHASZ/JSON-SIMD-1.06/source/SIMD.xsnvd
metacpan.org/release/PJUHASZ/JSON-SIMD-1.07/changesnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000