CVE-2026-59146

Data::SpatialHash::Shared for Perl, versions before 0.02, is vulnerable to out-of-bounds reads/writes due to unvalidated bucket, link and free-list indices in sph_walk_cell and sph_alloc_slot. The attach-time validator checks header scalars/region against file size but does not validate array con...

CVE-2026-59146 Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucket, link and free-list indices in sph_walk_cell and sph_alloc_slot

Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucket, link and free-list indices in sphwalkcell and sphallocslot. The attach-time validator sphvalidateheader checks the header scalars and region layout against the file size, but does...