EUVD-2026-46372

Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in ndarray.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

CVE-2026-64616

CVE-2026-64616 affects Data::NDArray::Shared for Perl versions before 0.02. The code creates a mmap backing file with mode 0666 via open(path, O_RDWR|O_CREAT, 0666) in ndarray.h, so the file becomes world-readable (0644 after umask). With O_NOFOLLOW absent, a symlink can be followed; with O_EXCL ...