Executive brief
Data::ReqRep::Shared is a Perl library used for shared memory communication between processes. A security flaw allows a local attacker with access to the library's backing file to trigger an out-of-bounds memory read. This could lead to the exposure of sensitive information from the application's memory or cause the application to crash, resulting in a denial of service.
Technical details
An out-of-bounds read vulnerability exists in Data::ReqRep::Shared before version 0.05 due to insufficient validation of memory offsets. The function reqrep_recv_locked performs a memcpy using an offset and length read directly from a memory-mapped (mmap'd) segment without verifying them against the actual arena capacity (req_arena_cap). A local attacker who can modify the backing file can poison these values while maintaining a valid header. When the process attempts to receive the request, it may read adjacent memory or crash. This issue is addressed in version 0.05.
Affected products
- EGOR Data::ReqRep::Shared before 0.05
Timeline
- 2026-07-21: advisory
- 2026-07-21: disclosed
- 2026-07-21: patched: Fixed in version 0.05