CVE-2009-3626: Perl

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression match.

Affected products

• Perl Perl: version 5.10.1 only

Published 2009-10-29. Last modified 2026-06-16.