Timothy Legge

**Name of the Vulnerable Software and Affected Versions** Perl versions prior to 5.43.11 **Description** A heap buffer overflow occurs on 32-bit builds when compiling regular expressions containing a repeated fixed string. The issue resides in the `Perl study chunk()` function within `regcomp study.c`, which validates the size of the joined substring buffer using characters instead of bytes. When a quantified fixed substring has a large minimum count, the byte length calculation `mincount * l` can overflow `SSize t`, resulting in an undersized `SvGROW` allocation. This causes subsequent copy operations to write past the end of the buffer. An attacker can trigger this condition by providing a specially crafted regular expression for compilation. **Recommendations** Update to version 5.43.11 or later.

**Name of the Vulnerable Software and Affected Versions** Crypt::NaCl::Sodium versions through 2.001 **Description** The software contains an integer overflow flaw on 32-bit systems. Specifically, the Sodium.xs component casts a `STRLEN` (size t) to an unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems, `size t` is typically 32-bits, while an unsigned long long is at least 64-bits. **Recommendations** Update to a version of Crypt::NaCl::Sodium later than 2.001.