Crypt
CVE-2026-30909
CRITICAL
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft oversized input exceeding SIZE_MAX threshold
-
DeliveryTrigger integer overflow in buffer calculation
-
ExploitAllocate undersized output buffer
-
ExecutionWrite beyond buffer boundary
-
ImpactExecute arbitrary code
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Integer overflow checks
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Crypt::NaCl::Sodium versions ≤2.002 with bin2hex(), encrypt(), aes256gcm_encrypt_afternm(), or seal() functions processing input messages larger than SIZE_MAX/2 (bin2hex) or SIZE_MAX-16 (other functions). Requires ability to pass exceptionally large message payloads to vulnerable functions. |
| Impact | CVSS 9.8 — integer overflows in cryptographic operations can silently produce wrong results, undermining data integrity and confidentiality. |
| Exploit ScenarioDerived | An attacker triggers an integer overflow in the crypto module to cause a buffer overflow or generate weak cryptographic output. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 12, 2026
Perl Crypt::NaCl::Sodium module through 2.002 has potential integer overflows in cryptographic operations that could weaken security guarantees.
Earlier versions of this analysis (1)
Integer overflows in Perl NaCl/Sodium crypto module may compromise security.
RemediationAI
Update the module. Verify cryptographic output integrity.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Crypt::NaCl::Sodium <= 2.002 has CWE-190 integer overflows in bin2hex, encryption, and other operations that could lead to buffer overflows or incorrect cryptographic output.
Know when Crypt gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
DescriptionCVE.org
Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows.
bin2hex, encrypt, aes256gcm_encrypt_afternm and seal functions do not check that output size will be less than SIZE_MAX, which could lead to integer wraparound causing an undersized output buffer.
Encountering this issue is unlikely as the message length would need to be very large.
For bin2hex() the bin_len would have to be > SIZE_MAX / 2 For encrypt() the msg_len would need to be > SIZE_MAX - 16U For aes256gcm_encrypt_afternm() the msg_len would need to be > SIZE_MAX - 16U For seal() the enc_len would need to be > SIZE_MAX - 64U
Executive ViewAI
A critical integer overflow vulnerability in Crypt::NaCl::Sodium (Perl cryptographic library) affects any systems using this library for encryption operations, potentially allowing attackers to trigger buffer overflows and execute arbitrary code. Organizations using this library must immediately assess exposure and implement compensating controls, as no security patch is currently available from the vendor.
Disable use of affected functions (bin2hex, encrypt, aes256gcm_encrypt_afternm, seal) if not critical to operations; implement strict network access controls and WAF rules to limit exposure; segment systems running this library from sensitive networks; deploy runtime application self-protection (RASP) to monitor for exploitation; consider immediate migration to alternative cryptographic libraries such as libsodium directly or Crypt::Sodium with verified patches; enforce strict input validation and size checking at the application layer; increase logging and monitoring for suspicious cryptographic operations.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Integer overflow occurs when an arithmetic operation produces a result that exceeds the maximum value a given integer type can store.
Affected Products (CPE)CVE.org
Related Vulnerabilities in Crypt::NaCl::Sodium Integer Overflow
View all 2Predictable salt generation in Crypt::Password through version 0.28 for Perl weakens the security of stored password has
Crypt::Sodium::XS for Perl bundles a vulnerable version of libsodium (<= 1.0.20) that has a signature verification flaw.
Heap out-of-bounds read in the Perl module Crypt::OpenSSL::PKCS12 before version 1.96 lets a crafted PKCS#12 file leak a
Heap out-of-bounds read in the Crypt::OpenSSL::X509 Perl module (versions before 2.1.3) lets a crafted X.509 certificate
Integer overflow in Crypt::NaCl::Sodium Perl module through version 2.001 on 32-bit systems. The Sodium.xs binding casts
Private-key recovery in the Crypt::DSA Perl module (all versions before 1.22) stems from a biased random number generato
NULL pointer dereference in Crypt::OpenSSL::PKCS12 before version 1.98 for Perl enables process crashes when any caller
Timing side-channel in the Crypt::Password Perl module (versions through 0.28) allows attackers to incrementally guess a
Denial of service in the Crypt::OpenSSL::X509 Perl module before 2.1.3 lets a malformed X.509 certificate crash any Perl
Heap buffer overflow in Crypt::SysRandom::XS before version 0.010 allows denial of service through negative length param
Heap buffer overflow in Perl's Crypt::URandom module (versions 0.41-0.54) allows denial of service through integer wrapa
Predictable salt generation in the Perl Crypt::PBKDF2 module before version 0.261630 weakens the cryptographic strength
Exploit-DB