CVE-2026-59143

Data::RoaringBitmap::Shared for Perl (versions before 0.02) contains an out-of-bounds read in rb_contains_locked due to unvalidated container_offset and cardinality. The attach-time validator validates header scalars/region size but not bucket contents, then uses pool + container_off * 8192 to fo...