{"api_version":"1","generated_at":"2026-10-21T07:03:22+00:00","cve":"CVE-2026-110680","urls":{"html":"https://cve.report/CVE-2026-110680","api":"https://cve.report/api/cve/CVE-2026-110680.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-110680","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-110680"},"summary":{"title":"Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv","description":"Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv.\n\nWith canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed 64-entry stack array or, for larger counts, a heap array sized from the first pass. If the second pass exceeds that capacity, entries are written out of bounds before the counts are compared.\n\nThis corrupts stack or heap memory and can crash the process.","state":"PUBLISHED","assigner":"CPANSec","published_at":"2026-10-19 19:17:21","updated_at":"2026-10-19 20:50:17"},"problem_types":["CWE-787","CWE-787 CWE-787 Out-of-bounds Write"],"metrics":[],"references":[{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","name":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","refsource":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/44c4591cc62ea7f453a0ed931abf24394e1560a1.patch","name":"https://github.com/rurban/Cpanel-JSON-XS/commit/44c4591cc62ea7f453a0ed931abf24394e1560a1.patch","refsource":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110680","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110680","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[{"source":"CNA","time":"2026-10-14T00:00:00.000Z","lang":"en","value":"Version 4.80 released with fix."}],"solutions":[{"source":"CNA","title":"","value":"Upgrade to Cpanel-JSON-XS 4.80 or later.","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","modules":["Cpanel::JSON::XS"],"packageName":"Cpanel-JSON-XS","packageURL":"pkg:cpan/Cpanel-JSON-XS","programFiles":["XS.xs"],"programRoutines":[{"name":"encode_hv"}],"repo":"https://github.com/rurban/Cpanel-JSON-XS","versions":[{"lessThan":"4.80","status":"affected","version":"4.20","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv.\n\nWith canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed 64-entry stack array or, for larger counts, a heap array sized from the first pass. If the second pass exceeds that capacity, entries are written out of bounds before the counts are compared.\n\nThis corrupts stack or heap memory and can crash the process."}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-19T18:12:01.950Z","orgId":"9b29abf9-4ab0-4765-b253-1875cd9b441e","shortName":"CPANSec"},"references":[{"tags":["patch"],"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/44c4591cc62ea7f453a0ed931abf24394e1560a1.patch"},{"tags":["release-notes"],"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes"}],"solutions":[{"lang":"en","value":"Upgrade to Cpanel-JSON-XS 4.80 or later."}],"source":{"discovery":"UNKNOWN"},"timeline":[{"lang":"en","time":"2026-10-14T00:00:00.000Z","value":"Version 4.80 released with fix."}],"title":"Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv","x_generator":{"engine":"cpansec-cna-tool 0.1"}}},"cveMetadata":{"assignerOrgId":"9b29abf9-4ab0-4765-b253-1875cd9b441e","assignerShortName":"CPANSec","cveId":"CVE-2026-110680","datePublished":"2026-10-19T18:12:01.950Z","dateReserved":"2026-10-14T13:25:23.957Z","dateUpdated":"2026-10-19T18:12:01.950Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-19 19:17:21","lastModifiedDate":"2026-10-19 20:50:17","problem_types":["CWE-787","CWE-787 CWE-787 Out-of-bounds Write"],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"110680","Ordinal":"1","Title":"Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write o","CVE":"CVE-2026-110680","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"110680","Ordinal":"1","NoteData":"Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv.\n\nWith canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed 64-entry stack array or, for larger counts, a heap array sized from the first pass. If the second pass exceeds that capacity, entries are written out of bounds before the counts are compared.\n\nThis corrupts stack or heap memory and can crash the process.","Type":"Description","Title":"Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write o"}]}}}