CVE-2022-48522

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

3.5% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-25)

CWE

CWE-787

Published

2023-08-22

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• perl:perl

References

• https://github.com/Perl/perl5/blob/79a7b254d85a10b65126ad99bf10e70480569d68/sv.c#L16336-L16345
• https://security.netapp.com/advisory/ntap-20230915-0008/
• https://github.com/Perl/perl5/blob/79a7b254d85a10b65126ad99bf10e70480569d68/sv.c#L16336-L16345
• https://security.netapp.com/advisory/ntap-20230915-0008/
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Check your stackJSON