Executive brief
Data::RingBuffer::Shared is a Perl library used for high-performance data sharing between different processes. A security flaw allows a local user with access to the data storage file to trigger a memory corruption error. This could lead to a program crash or potentially allow an attacker to gain unauthorized control over the application's execution.
Technical details
A stack-based buffer overflow (CWE-121) exists in Data::RingBuffer::Shared before version 0.04. The vulnerability is located in the ring_read_seq function, which performs a memcpy operation using an elem_size value read directly from a memory-mapped (mmap'd) backing file. While the attach-time validator ring_validate_header checks for capacity and total size consistency, it fails to verify that elem_size does not exceed the 8-byte destination scalar. A local attacker with write access to the backing file can manipulate the header to specify a large elem_size, causing the next read operation to overwrite adjacent stack frames. This issue was addressed in version 0.04.
Affected products
- EGOR (vividsnow) Data::RingBuffer::Shared < 0.04
Timeline
- 2026-07-03: patched: Version 0.04 released with security hardening.
- 2026-07-21: disclosed: CVE-2026-59144 published.