CVE-2026-59139
Data::ReqRep::Shared Perl modules before version 0.05 allow an attacker to read memory outside the intended buffer. The flaw occurs when the module copies data from a file without checking the offset and length, which can be manipulated by a local peer. This can expose sensitive data or crash the application.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Perl developers using Data::ReqRep::Shared modules older than version 0.05.
Real-world impact
An attacker who can write to the module’s backing file could read arbitrary memory contents or cause the program to terminate, potentially leaking confidential information or disrupting service.
Why this severity
The CVSS score of 9.1 reflects that the vulnerability is exploitable over the network, requires no privileges or user interaction, and can lead to complete loss of confidentiality and availability.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources