CyberRota Analysis
AI-GeneratedDBI versions prior to 1.650 for Perl are vulnerable to a heap overflow when processing SQL statements containing an excessive number of placeholders, potentially leading to arbitrary code execution. This critical vulnerability, with a CVSS score of 9.8, poses significant risks for applications relying on DBI for database interactions, especially those handling large or complex SQL queries. Organizations using affected versions should prioritize upgrading to version 1.650 or later to mitigate this severe security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a hard limit of 99,999 placeholders.
Related CVEs
Other vulnerabilities affecting the same vendor(s)