EGOR Data::RingBuffer::Shared up to 0.03 ring.h ring_read_seq elem_size stack-based overflow

Summaryinfo

A vulnerability was found in EGOR Data::RingBuffer::Shared up to 0.03 and classified as problematic. Impacted is the function ring_read_seq of the file ring.h. Such manipulation of the argument elem_size leads to stack-based overflow. This vulnerability is documented as CVE-2026-59144. The attack needs to be performed locally. There is not any exploit available.

Detailsinfo

A vulnerability was found in EGOR Data::RingBuffer::Shared up to 0.03 and classified as problematic. Affected by this issue is the function ring_read_seq of the file ring.h. The manipulation of the argument elem_size with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is confidentiality, integrity, and availability. CVE summarizes:

Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem_size in ring_read_seq. The attach-time validator ring_validate_header checks the capacity-overflow and total_size consistency of the header but never caps elem_size against the destination size. ring_read_seq does memcpy(out, ring_slot(h, seq), elem_size) with elem_size read raw from the mmap'd segment, copying into a fixed 8-byte destination scalar. An elem_size larger than 8 bytes writes past the destination. A local peer that can write the backing file can leave the header valid while setting a large elem_size, so the next read copies a file-controlled length into the fixed 8-byte stack buffer, corrupting adjacent stack frames.

The advisory is shared for download at metacpan.org. This vulnerability is handled as CVE-2026-59144 since 07/02/2026. The exploitation is known to be easy. The attack needs to be approached locally. There are known technical details, but no exploit is available.

Upgrading to version 0.04 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• EGOR

Name

• Data::RingBuffer::Shared

Version

• 0.03

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion