EUVD-2026-46379

Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in ring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

CVE-2026-59144

Summary (CVE-2026-59144) Data::RingBuffer::Shared for Perl, versions before 0.04, is vulnerable to a stack buffer overflow caused by an unvalidated elem_size in ring_read_seq. The attach-time validator checks capacity-overflow and total_size but does not cap elem_size against the destination size...