EUVD-2026-46369

Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without ONOFOLLOW. The segment is created in bufgeneric.h with openpath, ORDWR|OCREAT|OEXCL, 0666. OEXCL blocks a pre-seeded file on create, but the mode is 0666, so under the default umask 02...

CVE-2026-64613

Data::Buffer::Shared for Perl versions before 0.05 is affected. A world-readable mmap backing file is created (mode 0666 then 0644 by default umask) and opened with open(path, O_RDWR|O_CREAT|O_EXCL) without O_NOFOLLOW. A pre-planted symlink at the path can be followed, allowing local users to rea...