PT-2026-46958 · Hmbrand · Dbi
Published
2026-06-05
·
Updated
2026-06-05
·
CVE-2026-10879
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders.
The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Dbi