EGOR Data::RadixTree::Shared up to 0.1 Validator radix.h rdx_find_locked node/arena out-of-bounds

Summaryinfo

A vulnerability classified as problematic was found in EGOR Data::RadixTree::Shared up to 0.1. The affected element is the function rdx_find_locked of the file radix.h of the component Validator. The manipulation of the argument node/arena results in out-of-bounds. This vulnerability is cataloged as CVE-2026-59141. The attack must be initiated from a local position. There is no exploit available.

Detailsinfo

A vulnerability classified as problematic has been found in EGOR Data::RadixTree::Shared up to 0.1. Affected is the function rdx_find_locked of the file radix.h of the component Validator. The manipulation of the argument node/arena with an unknown input leads to a out-of-bounds vulnerability. CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated node and arena indices in rdx_find_locked. The attach-time validator rdx_validate_header checks the header scalars and region layout against the file size, but does not validate the node records it then trusts. rdx_find_locked indexes nodes[cur].children[k] and reads each node's label_off and label_len raw from the mmap'd segment, none bounded against the node count or the arena size. A local peer that can write the backing file can leave the header valid while poisoning the node records, so a lookup dereferences an out-of-bounds node or arena index, reading adjacent memory or crashing the process.

The advisory is shared for download at metacpan.org. This vulnerability is traded as CVE-2026-59141 since 07/02/2026. The exploitability is told to be easy. The attack needs to be approached locally. There are known technical details, but no exploit is available.

Upgrading to version 0.02 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• EGOR

Name

• Data::RadixTree::Shared

Version

• 0.1

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion