A high-severity out-of-bounds memory vulnerability in EGOR Data::SpatialHash::Shared allows local attackers to achieve arbitrary memory corruption, potentially leading to confidentiality, integrity, and availability impacts.

This vulnerability involves out-of-bounds read (CWE-125) and write (CWE-787) flaws caused by unvalidated array indices within sph_walk_cell and sph_alloc_slot functions, requiring local access with user interaction.

A successful exploit of this vulnerability could allow a local peer with file-writing capabilities to corrupt process memory or crash the application. This poses significant risks of data compromise, system instability, and unauthorized access. Given the CVSS score of 7.8, this issue presents a high risk to environment integrity and confidentiality.

Immediate Action: Upgrade EGOR Data::SpatialHash::Shared to version 0.02 or later, which correctly bounds every entry index against the entry count prior to dereferencing.

Proactive Monitoring: Monitor system logs for unexpected application crashes, segmentation faults, or anomalies related to process execution.

Compensating Controls: Restrict local file system permissions on shared memory backing files to trusted accounts only, minimizing the risk of unauthorized file poisoning.

Public Exploit Available: false

Given the high CVSS severity score of 7.8 and the potential for complete memory corruption, administrators must apply the vendor patch immediately. Updating to version 0.02 or later effectively mitigates the flaw by introducing proper bounds checking on entry indices.