CVE-2025-1828
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Mar 11, 2025
Updated: Mar 26, 2025
CWE ID 338
Summary
CVE-2025-1828 is a vulnerability affecting the Crypt::Random Perl package versions 1.05 through 1.55. Instead of utilizing cryptographically secure random number generators, this package may resort to the rand() function, which is not strong enough for cryptographic applications. If no Provider is specified and neither /dev/urandom nor an Entropy Gathering Daemon (egd) service is available, Crypt::Random will default to the insecure Crypt::Random::rand provider. Notably, this issue applies to Windows versions of Perl by default.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.