Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-59140— Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths

Quick assessment

Affected

EGOR Data::SortedSet::Shared

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

EGOR Data::SortedSet::Shared是EGOR个人开发者的一个数据集合排序共享模块。 EGOR Data::SortedSet::Shared 0.03之前版本存在缓冲区错误漏洞，该漏洞源于未验证的节点索引导致越界读取，可能读取相邻内存或导致进程崩溃。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.54% · P45 Updated Jul 23, 2026

Possible ATT&CK Techniques 2 AI

T1127 · Trusted Developer Utilities Proxy Execution T1200 · Hardware Additions

Affected Version Matrix 1

Vendor	Product	Version Range	Status
EGOR	Data::SortedSet::Shared	`< 0.03`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-59140

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths

Source: CVE Program / CVE List V5

Vulnerability Description

Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths. The attach-time validator ss_validate_header bounds only the root index against the node pool (node_capacity). The order-statistics and min/max queries then follow children[], leftmost and rightmost node indices read raw from the mmap'd segment without bounding them against node_capacity. A full structural check (ss_validate_tree) exists but runs only via an explicit validate method, not on attach. A local peer that can write the backing file can leave the header valid while poisoning the tree links, so the next rank, min or max query dereferences an out-of-bounds node index, reading adjacent memory or crashing the process.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存读

Source: CVE Program / CVE List V5

Vulnerability Title

EGOR Data::SortedSet::Shared 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
EGOR	Data::SortedSet::Shared	0 ~ 0.03	-

II. Public POCs for CVE-2026-59140

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-59140

请登录查看更多情报信息。

Vendor Pages for CVE-2026-59140 (1)

🔗 Changes - metacpan.org Read full article release-notes

Other References for CVE-2026-59140 (1)

https://metacpan.org/release/EGOR/Data-SortedSet-Shared-0.03/diff/EGOR/Data-SortedSet-Shared-0.02#sortedset.h

https://www.cve.org/CVERecord?id=CVE-2026-59140

Same Patch Batch · EGOR · 2026-07-21 · 23 CVEs total

CVE-2026-59143		Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via
CVE-2026-65068		Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backi
CVE-2026-65062		Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing
CVE-2026-65065		Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap bac
CVE-2026-65069		Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backi
CVE-2026-65066		Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backin
CVE-2026-65063		Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing
CVE-2026-65067		Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing fi
CVE-2026-65064		Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing f
CVE-2026-65061		Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing fi
CVE-2026-59147		Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writ
CVE-2026-59141		Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds read via unva
CVE-2026-59145		Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalid
CVE-2026-59146		Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writ
CVE-2026-59144		Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via a
CVE-2026-64613		Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing fi
CVE-2026-64617		Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing fi
CVE-2026-64615		Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing fil
CVE-2026-64614		Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing fil
CVE-2026-64616		Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing f

Showing top 20 of 23 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Data::SortedSet::Shared

CVE-2026-65062
Data::SortedSet::Shared versions before 0.03 for Perl create

Same vendor: EGOR

Same weakness: CWE-125