Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
azure perl-yaml may read beyond its memory buffer
published 5 months ago
Summary
The Perl YAML library used in Azure can accidentally read data from just before a text string when it processes certain time‑like values. This stray read could expose unrelated memory contents to the program, potentially leading to unintended behavior. Update the library to the latest version or replace it with a newer, patched release.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | perl-yaml | <= 1.30-2 |
Original advisory text
CVE-2026-5089 affecting package perl-YAML 1.30-2
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read.
The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#base60 handlers. When processing the leftmost segment of a colon-separated value (e.g., the 1 in 1:30:45), the inner while loop can decrement a pointer past the start of the string buffer:
while ( colon >= ptr && *colon != ':' )
{
colon--;
}
if ( *colon == ':' ) *colon = '\0'; // colon may be ptr-1 here
When no colon is found (final/leftmost segment), colon becomes ptr-1, and the subsequent *colon dereference reads one byte before the allocated buffer.
The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#base60 handlers. When processing the leftmost segment of a colon-separated value (e.g., the 1 in 1:30:45), the inner while loop can decrement a pointer past the start of the string buffer:
while ( colon >= ptr && *colon != ':' )
{
colon--;
}
if ( *colon == ':' ) *colon = '\0'; // colon may be ptr-1 here
When no colon is found (final/leftmost segment), colon becomes ptr-1, and the subsequent *colon dereference reads one byte before the allocated buffer.
References
Timeline
Published12 May 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
AZL-109511 · OSV
Track software like this
Free during beta