CVE-2025-40912 CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode
A dependency in the Perl CryptX library is susceptible to malformed unicode issues, potentially causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-40912?
CVE-2025-40912 is a critical vulnerability in MIK CryptX, published on 11 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode.
CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362.
Weakness: CWE-1395
Which versions are affected by CVE-2025-40912?
How do I fix CVE-2025-40912?
Upgrade to a fixed version.
Is CVE-2025-40912 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-40912 exists.
Sources
Also known as DEBIAN-CVE-2025-40912, GHSA-w3qg-5chj-8g9g, UBUNTU-CVE-2025-40912.