CVE-2026-59142
A critical flaw in the Perl module Data::HashMap::Shared lets an attacker read memory outside the intended bounds. The issue stems from unvalidated offsets and lengths used when copying shared memory. Exploitation could expose sensitive data or crash the application.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Perl module Data::HashMap::Shared, versions before 0.14, used by any Perl application that relies on this module.
Real-world impact
An attacker could read arbitrary memory, potentially leaking confidential information or causing a denial‑of‑service crash, which could disrupt services or expose sensitive data.
Why this severity
The CVSS score of 9.1 reflects that the vulnerability is network‑exploitable with no authentication or user interaction, and can lead to complete loss of confidentiality and availability.
What to do about it
- 01Upgrade Data::HashMap::Shared to version 0.14 or later.
- 02Restart any applications that use the module to ensure the new version is loaded.
NVD description indicates affected versions before 0.14.
Timeline
- Jul 21, 2026 · 11d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 22, 2026 · 10d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.