CVE-2025-11683
Medium
Description
YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure Missing null terminators in token.c leads to but-of-bounds read which allows adjacent variable to be read The issue is seen with complex YAML files with a hash of all keys and empty values. There is no indication that the issue leads to accessing memory outside that allocated to the module.
SeverityMedium
CVSS6.5
Exploit probability—
ProductToddr Yaml\
PublishedOct 16, 2025
First seenOct 16, 2025
Weakness typeCWE-119Memory buffer bounds error
How to fix
Update
- toddr yaml\1.36 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| toddr yaml\ | \ ≤ v < 1.36 | 1.36 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.