CVE-2026-59145

CVE-2026-59145 affects Data::Intern::Shared before 0.02 (Perl). The vulnerability arises from an out-of-bounds read in si_idx_find due to unvalidated indices: slots[i].id, reverse[], and the arena length prefix are used without bounds checks against count or arena_used. The lookup traverses a tri...

CVE-2026-59145 Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, reverse and arena indices in si_idx_find

Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, reverse and arena indices in siidxfind. The attach-time validator sivalidateheader is thorough about the header and layout magic, version, section offsets, totalsize, count and arenaused but does...