In the case (stackptr == stacksize - 1), the stack will NOT be expanded. Then the new value will be written at location (++stackptr), which equals stacksize and therefore falls just outside the allocated buffer.
The bug can be observed when parsing an XML file with very deep element nesting
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| TODDR | XML::Parser | unaffected |
|
No data.
No data.
No data.
Subscriptions
No data.
Tracking
Sign in to view the affected projects.
No advisories yet.
Solution
Apply the patch that has been publicly available since 2006-06-13 or upgrade to version 2.48 or later when it is released.
Workaround
Apply the patch that has been publicly available since 2006-06-13.
Thu, 19 Mar 2026 11:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack. In the case (stackptr == stacksize - 1), the stack will NOT be expanded. Then the new value will be written at location (++stackptr), which equals stacksize and therefore falls just outside the allocated buffer. The bug can be observed when parsing an XML file with very deep element nesting | |
| Title | XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack | |
| Weaknesses | CWE-122 CWE-193 |
|
| References |
|
MITRE
Status: PUBLISHED
Assigner: CPANSec
Published:
Updated: 2026-03-19T11:08:04.341Z
Reserved: 2026-03-16T22:52:39.890Z
Link: CVE-2006-10003
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-03-19T12:16:17.047
Modified: 2026-03-19T13:25:00.570
Link: CVE-2006-10003
Redhat
No data.
OpenCVE Enrichment
No data.