Text::Minify::XS Heap Overflow Vulnerability in Perl

A heap overflow vulnerability has been identified in the Text::Minify::XS Perl module, specifically in versions 0.3.0 prior to 0.7.8. The issue arises in the minify functions, which improperly handle certain malformed UTF-8 characters, leading to heap corruption. This vulnerability is particularly notable because the minify_utf8 function is an alias for the minify function, potentially increasing the attack surface.

Impact

Exploitation of this vulnerability causes a heap overflow, which can lead to memory corruption and potentially allow for arbitrary code execution.

Remediation

Users can upgrade to Text::Minify::XS version 0.7.8 or later to address this vulnerability.