Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110753— Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline

Quick assessment

Affected
CVE-2026-110753
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Perl 的 Text::CSV_XS 模块在 1.46 至 1.65 之间的版本中存在一个“释放后使用”（use-after-free）漏洞。当 函数因 选项跳过一个空行时， 相关的变量会被错误释放。 在使用 时，解析器会将每个字段写入调用者提供的标量变量中，而不会对该标量持有引用。当 跳过末尾的空行时，解析器会释放当前字段对应的标量变量，却未检查该标量是否已被绑定，从而导致应用程序对该变量的引用计数减少。在"eof"模式下，任何空行都会触发相同的错误行为。 由于该变量在应用程序仍持有其引用时就被释放，后续代码若

AI Predicted 5.9 Difficulty: Easy

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

I. Basic Information for CVE-2026-110753

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline
Source: CVE Program / CVE List V5
Vulnerability Description
Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline. With bind_columns, the parser writes each field into the caller's own scalar without taking a reference to it. When skip_empty_rows skips an empty last line, the parser frees the current field scalar without checking whether it is bound, dropping one reference from the application's variable. The "eof" mode does the same on any empty line. The variable is then freed while the application still references it, so later code uses freed memory and can crash the process.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 1.46 ~ 1.65 -

II. Public POCs for CVE-2026-110753

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110753

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-110753 (1)

Other References for CVE-2026-110753 (1)

IV. Related Vulnerabilities

Same weakness: CWE-416

V. Comments for CVE-2026-110753

No comments yet

Leave a comment