Threat Intelligence Database

Data::SpatialHash::Shared versions before 0.02 for Perl create a memory-mapped backing file with overly permissive permissions (world-readable) and open it without safeguards against symlink attacks or race conditions. This allows local users to read inter-process communication payloads and potentially manipulate the file open operation by pre-creating files or symlinks at the target path.

Data::SpatialHash::Shared versions before 0.02 for Perl contain an out-of-bounds read and write vulnerability due to unvalidated indices in key functions. This allows a local peer with write access to the backing file to corrupt memory or crash the process by manipulating bucket chains and free lists. The vulnerability arises because the validator checks header scalars and region layout but does not validate array contents, leading to unsafe memory access during queries and inserts.