VDB
GCVE-110-MAGEIA-2021-527
GCVE-110-MAGEIA-2021-527
Advisory Published
Encode.pm, as distributed in Perl through 5.34.0, allows local users to
gain privileges via a Trojan horse Encode::ConfigLocal library (in the
current working directory) that preempts dynamic module loading.
Exploitation requires an unusual configuration, and certain 2021 versions
of Encode.pm (3.05 through 3.11). This issue occurs because the || operator
evaluates @INC in a scalar context, and thus @INC has only an integer value.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | perl | 0 (affected), 5.32.1-1.1.mga8 (unaffected) | — |
| Mageia | perl-Encode | 0 (affected), 3.80.0-1.1.mga8 (unaffected) | — |
Aliases
Browse GCVE Records
73,734 records in the GCVE database · Updated July 18, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.