CVE-2026-78183

A flaw was found in DBD::Pg for Perl. This vulnerability involves a heap out-of-bounds write in the quote_float function when processing special numeric literals such as "Infinity". An attacker could potentially exploit this by providing specific input to the $dbh->quote method, leading to a two-byte memory overflow. This memory corruption could result in a denial of service or potentially lead to arbitrary code execution.

This Important heap out-of-bounds write in DBD::Pg affects version 3.21.0. Red Hat products are not impacted by this flaw because the vulnerable code is not present in the versions of perl-DBD-Pg shipped with Red Hat Enterprise Linux and other Red Hat offerings.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.