Out-of-bounds read in YAML::Syck for Perl (CVE-2025-11683)

CVE-2026-57077 is a one-byte out-of-bounds read (CWE-125) in YAML::Syck for Perl, caused by the bundled libsyck functions newline_len and is_newline dereferencing a scan pointer and the following byte for a "\r\n" pair with no NUL-terminator or bounds check. During block-scalar lexing at a document boundary, the scan runs one byte past the heap lexer buffer, reachable by any caller invoking Load or LoadFile on an untrusted document containing a block scalar at a document boundary. This is an incomplete fix of CVE-2025-11683, covering a lexer path the earlier fix did not address. Affected versions: - before 1.47 We recommend updating to: 1.47. CVSS 6.5 · our assessment: this_week Vendor advisory: https://seclists.org/oss-sec/2026/q3/161 Details: https://vuln.today/cve/CVE-2025-11683