CVE-2026-13221

Microsoft · Published July 15, 2026

4.0

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

Affected Products

azl3 perl 5.38.2-512 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N