CVE-2026-59139 Details
Description
Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in reqrep_recv_locked. The attach-time validator reqrep_validate_header checks the header scalars and region layout against the file size, but does not validate the array contents it then trusts. reqrep_recv_locked does memcpy(copy_buf, req_arena + arena_off, len) with arena_off and len read raw from the mmap'd segment and never bounded against the arena capacity (req_arena_cap). A local peer that can write the backing file can leave the header valid while poisoning a request slot's offset and length, so receiving the request copies a file-controlled offset and length out of the arena, reading adjacent memory or crashing the process.
A vulnerability in the Data::ReqRep::Shared module for Perl, affecting versions prior to 0.05, allows for an out-of-bounds read. This issue arises from an unvalidated arena offset and length in the 'reqrep_recv_locked' function. The vulnerability exists because the 'reqrep_validate_header' function checks header scalars and region layout against the file size but fails to validate the contents of the array it trusts. As a result, 'reqrep_recv_locked' performs a memory copy using an offset and length derived from the mapped segment, without proper bounds checking against the arena capacity. A local peer with write access to the backing file can manipulate the header to maintain its validity while corrupting a request slot's offset and length. This exploitation leads to copying a file-controlled offset and length out of the arena, potentially reading adjacent memory, causing a crash, or, according to a reference, allowing for arbitrary file reads.
Users can update to Data::ReqRep::Shared version 0.05 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 21, 2026CISA-ADP
Assessed Jul 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://metacpan.org/release/EGOR/Data-ReqRep-Shared-0.05/changes | CPANSec | Vendor |
| https://metacpan.org/release/EGOR/Data-ReqRep-Shared-0.05/diff/EGOR/Data-ReqRep-Shared-0.04#reqrep.h | CPANSec | Source CodeVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | CPANSec |
Affected Products
| Product | Versions |
|---|---|
| Data::ReqRep::Shared | < 0.05 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Modified | CISA-ADP |
| Jul 21, 2026 | New CVE Received | CPANSec |