CVE Feed

    Dashboard / CVE / CVE-2026-14739

    CVE-2026-14739

    DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a hard limit of 99,999 placeholders.

    Published:Jul 7, 2026
    Last Modified:Jul 8, 2026
    EPS:Jul 7, 2026
    EPSS Score:0.00187
    CVSS Score:9.8

    Affected Products

    Vendor
    Hmbrand
    Product
    Dbi

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-100 Overflow Buffers
    CAPEC-47 Buffer Overflow via Parameter Expansion

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High