CVE-2026-65066

CVE-2026-65066 affects Data::RingBuffer::Shared before 0.04 for Perl. The vulnerability arises because the ring buffer segment is created with open(path, O_RDWR|O_CREAT, 0666) in ring.h, yielding a world-readable file (0666) that becomes 0644 under the default umask. Without O_EXCL or O_NOFOLLOW,...

CVE-2026-59144 Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem_size in ring_read_seq

Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elemsize in ringreadseq. The attach-time validator ringvalidateheader checks the capacity-overflow and totalsize consistency of the header but never caps elemsize against the destination size...