CVE-2026-12087

A flaw was found in the perl-Socket component. The pack_ip_mreq_source() function, which handles network socket operations, contains an out-of-bounds heap read vulnerability. An attacker providing a specially crafted input can cause the system to read beyond the intended memory buffer, potentially leading to information disclosure from adjacent memory regions.

A flaw was found in the Perl Socket module's pack_ip_mreq_source() function. An incorrect length validation may allow an out-of-bounds heap read, potentially exposing up to a few bytes of adjacent memory. Successful exploitation requires an application to call the affected function with attacker-controlled input, which limits the practical impact to information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.