CPANSec DBI up to 1.653 Cast sql_type_cast num memory corruption

Summaryinfo

A vulnerability was found in CPANSec DBI up to 1.653. It has been classified as problematic. This impacts the function sql_type_cast of the component Cast. The manipulation of the argument num leads to memory corruption. This vulnerability is documented as CVE-2026-88815. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in CPANSec DBI up to 1.653. It has been rated as problematic. This issue affects the function sql_type_cast of the component Cast. The manipulation of the argument num with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is availability. The summary by CVE is:

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault. This is reachable in Perl using the sql_type_cast function: my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 );

The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-88815 since 09/10/2026. The exploitation is known to be easy. The attack may be initiated remotely. Technical details are known, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 364202 (Oracle Linux 9 : perl-DBI (ELSA-2026-76760)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.654 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (364202) and CERT Bund (WID-SEC-2026-3790). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Affected

• Red Hat Enterprise Linux
• RESF Rocky Linux
• SUSE Linux
• SUSE openSUSE
• Oracle Linux

Productinfo

Vendor

• CPANSec

Name

• DBI

Version

• 1.653

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion