CVE-2026-59140
Deferred Deferred - Pending Action

Out-of-Bounds Read in Data::SortedSet::Shared Perl Module

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: CPANSec

Description
Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths. The attach-time validator ss_validate_header bounds only the root index against the node pool (node_capacity). The order-statistics and min/max queries then follow children[], leftmost and rightmost node indices read raw from the mmap'd segment without bounding them against node_capacity. A full structural check (ss_validate_tree) exists but runs only via an explicit validate method, not on attach. A local peer that can write the backing file can leave the header valid while poisoning the tree links, so the next rank, min or max query dereferences an out-of-bounds node index, reading adjacent memory or crashing the process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-22
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-59140
EUVD
EUVD-2026-46353

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds read issue in the Perl Data::SortedSet::Shared library versions before 0.03. It occurs because the library does not validate node indices during rank and min/max query operations, only checking the root index against the node pool size. Attackers with write access to the backing file can manipulate tree links to cause out-of-bounds reads, potentially reading adjacent memory or crashing the process.

Detection Guidance

This vulnerability involves an out-of-bounds read in Data::SortedSet::Shared for Perl. Detection requires checking Perl modules for versions before 0.03 and validating tree structures in mmap'd segments. No direct commands are provided in the context.

Impact Analysis

If you use Data::SortedSet::Shared versions before 0.03 in a Perl application, an attacker with local write access to the backing file could exploit this to read sensitive memory or cause a denial-of-service by crashing the process. This could lead to information disclosure or application instability.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR or HIPAA by enabling unauthorized memory access or crashes in systems processing sensitive data. Out-of-bounds reads may lead to data leaks or denial of service, violating confidentiality or availability requirements under these regulations.

Mitigation Strategies

Upgrade Data::SortedSet::Shared to version 0.03 or later. Ensure all tree structures are validated using ss_validate_tree before processing. Restrict write access to backing files to prevent tree poisoning.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59140. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart