CVE-2024-14031

CVE-2024-14031 describes a high-severity buffer overwrite vulnerability in Sereal::Encoder versions 4.000 through 4.009_002 for Perl, caused by an embedded vulnerable version of the Zstandard library. This flaw is a race condition in Zstandard's one-pass compression functions, which an unauthenticated network attacker could exploit to write bytes out of bounds if an undersized output buffer is used, leading to high impacts on confidentiality, integrity, and availability (CVSS 8.1 HIGH). Despite the severe potential impact, exploitation complexity is high due to the race condition, and there is currently no evidence of active exploitation, public exploit code, or significant community discussion.