An integer overflow vulnerability in the Net::IDN::Punycode Perl library allows unauthenticated attackers to trigger an out-of-bounds read, potentially leading to application crashes or information disclosure.

The vulnerability exists in the XS backend of the library, specifically within the encode_punycode function. An integer overflow in the delta accumulator allows an attacker to supply specially crafted strings that cause an out-of-bounds read of the digit table, which can be exploited by unauthenticated users to crash the service or read memory outside the intended buffer.

The vulnerability carries a CVSS score of 6.5, reflecting a medium severity risk that primarily affects service availability and data integrity. Successful exploitation could lead to denial of service through process crashes, which may disrupt critical business applications relying on this library for internationalized domain name processing. Furthermore, the potential for out-of-bounds memory access introduces a risk of sensitive information leakage, which could be leveraged as part of a broader attack chain.

Immediate Action: Upgrade the Net::IDN::Punycode library to version 2.590 or later immediately to resolve the integer overflow flaw.

Proactive Monitoring: Review application logs for frequent or unexpected process crashes related to Punycode conversion functions, which may indicate exploitation attempts.

Compensating Controls: If an immediate upgrade is not feasible, implement input validation at the application layer to reject excessively long or malformed input strings before they reach the Punycode encoding routines.

Public Exploit Available: Unknown

Given the ubiquity of Perl-based web utilities and the potential for service instability, it is imperative that development teams identify any dependencies on the affected Net::IDN::Punycode library. Organizations should prioritize patching to version 2.590 to eliminate the out-of-bounds read vulnerability and ensure the robustness of their domain name handling processes.