Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-40912 EUVD-2025-18140GHSA-w3qg-5chj-8g9g

CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode

Published Jun 11, 2025 · Updated Jun 11, 2025 · Assigned by CPANSec

Description

CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode.

CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362.

Affected products

VendorProductAffectedFixed
MIK CryptX 0.002 – < 0.065 0.065

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 libcryptx-perl 0.066-1 —
Debian 13 libcryptx-perl 0.066-1 —
Debian 12 libcryptx-perl 0.066-1 —
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS libcryptx-perl 0.080-2ubuntu0.1~esm1 USN-8128-1
Ubuntu Pro 22.04 LTS libcryptx-perl 0.076-1ubuntu0.1~esm1 USN-8128-1
Ubuntu Pro 20.04 LTS libcryptx-perl 0.067-1ubuntu0.1~esm1 USN-8128-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS libcryptx-perl 0.056-1ubuntu0.1~esm1 USN-8128-1

Advisories 1

References