CVE-2026-59144
A stack buffer overflow exists in the Perl module Data::RingBuffer::Shared for versions before 0.04. The flaw occurs when the module reads an unvalidated element size from a memory‑mapped file, copying more data than the 8‑byte destination can hold.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Perl developers using the Data::RingBuffer::Shared module, specifically versions earlier than 0.04.
Real-world impact
If an attacker can write to the module’s backing file, they can cause the program to overwrite memory on the stack, potentially leading to arbitrary code execution or a crash.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability is network‑exploitable, requires no privileges, has no user interaction, and can compromise confidentiality, integrity, and availability.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources