CVE-2026-59142

Name of the Vulnerable Software and Affected Versions Data::HashMap::Shared versions prior to 0.14

Description An out-of-bounds read exists in the shm str copy() function due to unvalidated arena offset and length. While the shm validate header() validator checks header scalars and region layout against file size, it fails to validate the array contents. Consequently, shm str copy() performs a memcpy() using an offset and length read directly from the mmap'd segment without bounds checking. This affects the each, keys, values, pop, shift, take, swap, drain, and cursor paths. A local attacker with write access to the backing file can poison a record's offset and length, leading to the reading of adjacent memory or a process crash during map iteration or draining.

Recommendations Update to version 0.14 or later.