Skip to content
OpenAdvisories
High USN-7750-1 1 CVE

libjson-xs-perl vulnerability

Published Sep 15, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that JSON-XS incorrectly handled parsing certain JSON
data. An attacker could possibly use this issue to cause JSON-XS to crash,
resulting in a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS libjson-xs-perl 4.040-0ubuntu0.22.04.1
Ubuntu · 24.04 LTS 24.04:LTS libjson-xs-perl 4.040-0ubuntu0.24.04.1

Vulnerabilities 1

  • High 7.5
    CVE-2025-40928

    JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

    JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

    MLEHMANN JSON::XS perl-JSON-XS libjson-xs-perl Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-40928