{
  "cveId": "CVE-2026-17510",
  "url": "https://patchblox.com/security/cve/CVE-2026-17510",
  "summary": "CVE-2026-17510 is fixed in libcrypt-openssl-pkcs12-perl on 1 platform by DEBIAN-CVE-2026-17510 (version 1.98-1), released August 13, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "libcrypt-openssl-pkcs12-perl: Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero l...",
  "description": "Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute.  print_attribute() sizes the destination buffer for a BMPSTRING attribute from its declared byte length with \u0060Renew(*attribute, length, char)\u0060. A zero length attribute makes that a zero size reallocation, which Perl implements as a free returning NULL, so the buffer pointer becomes NULL, the following \u0060strncpy\u0060 copies nothing, and the caller dereferences NULL in the \u0060strlen()\u0060 it passes to \u0060newSVpvn()\u0060. A zero length BMPSTRING is even length, so the ASN.1 decoder accepts it and the value reaches this code. The UTF8STRING, OCTET STRING and BIT STRING arms size on \u0060length \u002B 1\u0060 or \u0060length * 4 \u002B 1\u0060 and are unaffected.  Any caller that passes an untrusted PKCS#12 file to info_as_hash() can crash the process. info() prints attribute values directly without sizing a buffer and is unaffected.",
  "published": "2026-08-09T02:16:34Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00609,
  "epssPercentile": 0.49434,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libcrypt-openssl-pkcs12-perl",
      "release": "Debian 14",
      "fixedVersion": "1.98-1",
      "fix": "DEBIAN-CVE-2026-17510",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-17510",
      "released": "2026-08-13T22:19:30Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}