CVE-2018-25099: Dcit Perl-Cryptx

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In the CryptX module before 0.062 for Perl, gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() do not verify the tag.

Affected products

• Dcit Perl-Cryptx: before 0.062 (fixed in 0.062)

Published 2024-03-18. Last modified 2026-06-17.