Stack Buffer Overflow in Data::RingBuffer::Shared for Perl

CVE-2026-59144

What is CVE-2026-59144?

The Data::RingBuffer::Shared module for Perl prior to version 0.04 is susceptible to a stack buffer overflow due to improper validation of the elem_size parameter in the ring_read_seq function. When the elem_size is not capped against the size of the destination buffer, it allows malicious inputs to overwrite adjacent memory locations, potentially leading to arbitrary code execution or other unauthorized actions. This vulnerability can be exploited by local attackers who are able to manipulate the backing file, allowing them to influence the program's behavior and execute unintended commands.

References