Out-of-Bounds Read Vulnerability in Data::SortedSet::Shared by Perl
CVE-2026-59140
Currently unrated
What is CVE-2026-59140?
The Data::SortedSet::Shared module in Perl is susceptible to an out-of-bounds read issue due to inadequate validation of node indices during rank and min/max queries. Versions prior to 0.03 do not properly enforce bounds on indices, allowing attackers with local access to potentially manipulate the underlying data structure. As a result, unvalidated node indices may lead to accessing adjacent memory or crashing the application, creating significant security risks.
Affected Version(s)
Data::SortedSet::Shared 0 < 0.03