PT-2026-56273 · Hmbrand · Dbi

H.Merijn Brand + 1 · Publicado 2026-07-07 · Atualizado 2026-07-08 · CVE-2026-14739

Mitre

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders.

The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders.

DBI version 1.650 sets a hard limit of 99,999 placeholders.

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2026-14739

Produtos afetados

Dbi

Referências · 6

• https://github.com/perl5-dbi/dbi/commit/2b77c88b655e9539a592c71a61fb965fc0075395.patch · Correção
• https://twitter.com/CVEnew/status/2074643366126760176 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2074645010784326052 · Publicação no Twitter
• https://metacpan.org/release/HMBRAND/DBI-1.650/changes · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-14739 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2026-10879 · Nota de Segurança