CVE-2026-60082
perl-DBI: perl-DBI: Denial of Service via out-of-bounds read
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 15, 2026
Updated · July 16, 2026
Description
A flaw was found in perl-DBI, a database interface for Perl. This vulnerability arises when the DBI library processes inconsistent data, specifically when a statement handle lacks fields but is associated with a non-empty data row. This inconsistency can cause the internal row-buffer to attempt reading from an invalid memory location, an out-of-bounds read. An attacker could exploit this by supplying malformed metadata and rows to the prepare method, potentially leading to application instability or a denial of service.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-125 · Out-of-bounds Read