PT-2025-29830 · Atrodo · Net::Dropbear

Published 2025-07-16 · Updated 2025-07-16 · CVE-2025-40913

NVD

Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow.

Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.

Weakness Enumeration

CWE-1395

Related Identifiers

CVE-2025-40913

Affected Products

Net::Dropbear

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-40913 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-36328 · Security Note
• https://github.com/libtom/libtommath/pull/546 · Note
• https://metacpan.org/release/ATRODO/Net-Dropbear-0.16/source/dropbear/libtommath/bn_mp_grow.c · Note
• https://github.com/advisories/GHSA-j3xv-6967-cv88 · Note