CVE-2026-2588Disclosure(timlegge / crypt\)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems size_t is typically 32-bits while an unsigned long long is at least 64-bits.

timlegge CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Other references

https://metacpan.org/release/TIMLEGGE/Crypt-NaCl-Sodium-2.001/source/Sodium.xs#L2119

Weakness type (CWE)

CWE-190

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

crypt\

Threat summary

3 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 2d ago at 1 mentions (2026-02-23); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

timlegge

Products

crypt\

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 3d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets2 URLs

By indicator

Full discourse3 posts

The Hacker Wire@TheHackerWire228d
Disclosure
🔴 CVE-2026-2588 - Critical Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer t... https://www.thehackerwire.com/vulnerability/CVE-2026-2588/ https://t.co/FlCunmQKcd
Post summary
The post announces CVE-2026-2588, an integer overflow flaw in Crypt::NaCl::Sodium on 32‑bit systems, providing technical details but no PoC, exploit, or patch information.
0001061
113 followersView on X
CRAC Learning - Tech@cracbot223d
Disclosure
CVE-2026-2588 (CVSS:9.1, CRITICAL) is Awaiting Analysis. Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a S..https://nvd.nist.gov/vuln/detail/CVE-2026-2588 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
This post announces a critical integer overflow vulnerability in Crypt::NaCl::Sodium (Perl) affecting versions up to 2.001 on 32‑bit systems, with no PoC, exploit details, or exploitation evidence provided.
0000024
173 followersView on X
CRAC Learning - Tech@cracbot224d
Disclosure
CVE-2026-2588 (CVSS:9.1, CRITICAL) is Awaiting Analysis. Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a S..https://nvd.nist.gov/vuln/detail/CVE-2026-2588 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A critical integer‑overflow flaw in Crypt::NaCl::Sodium for 32‑bit Perl systems has been disclosed with CVSS 9.1; no PoC, patch, or exploitation evidence is provided.
0000018
173 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	timlegge	crypt\	\	-	-

Explore more

Back to dashboard timlegge CVEs crypt\ vulnerabilities