Skip to content
COOEY

FAIL › dossier

perl

VENDOR

· dossier confidence 0%

Perl is a foundational programming language with a documented history of critical security vulnerabilities, including remote code execution and buffer overflows, requiring strict patching and validation in defense-industrial applications.

Failure events
4
Zero-days
0
RCEs
1
On KEV
1
Critical
3
Worst shame
85
PROFILE
Categoryprogramming_languageWhat they doPerl is a high-level, general-purpose programming language known for its text processing capabilities and extensive standard library.
SECURITY POSTURE

Perl has a history of critical vulnerabilities including remote code execution, buffer overflows, and silent regex errors, indicating a track record of significant security flaws in its core and ecosystem.

Notable failures
  • CVE-2021-22204 RCE via DjVu files
  • CVE-2026-9698 DBI buffer overflow
  • CVE-2026-13221 silent regex match errors
  • CVE-2026-8376 heap buffer overflow in regex compilation
Patterns: repeated critical vulnerabilities in core language components; buffer overflows and RCE in ecosystem modules
FAILURE HISTORY · 6
DATEEVENTSEVSUMMARY
2021-11-17 CVE-2021-22204 high ExifTool versions 7.44+ allows remote code execution via malicious DjVu files due to improper neutralization of user data.
2026-06-09 CVE-2026-9698 critical DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an applicati
2026-07-13 CVE-2026-13221 critical CVE-2026-13221: Perl versions through 5.43.9 produce silently incorrect regular expression match
2026-07-13 CVE-2026-13221 critical CVE-2026-13221: Perl versions through 5.43.9 produce silently incorrect regular expression match
2026-05-26 CVE-2026-8376 critical CVE-2026-8376: Perl versions through 5.43.10 have a heap buffer overflow when compiling regular
2026-05-26 CVE-2026-8376 critical CVE-2026-8376: Perl versions through 5.43.10 have a heap buffer overflow when compiling regular
DOSSIER SOURCES
Open questions: Exact founding year and headquarters location of Perl · Current ownership structure and organizational size
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-25 03:53:47.810531+00:00