CVE-2026-110759: Affected product not specified by the source

Affected technology

Product not specified by the source · 0 to before 1.65
Vendor not specified by the source

Description’s affected range: versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse

Component: Text::CSV_XS
Function: Text::CSV_XS::parse
File: CSV_XS.xs

What an attacker can do

The source does not specify what an attacker can achieve.