Critical severity9.1NVD Advisory· Published Jul 14, 2026· Updated Jul 15, 2026
CVE-2026-60082
CVE-2026-60082
Description
DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row.
When the statement handle had no fields but the source row was non-empty, the internal row-buffer helper would read from a negative array index.
This could be triggered by a caller supplying inconsistent metadata and rows to the prepare method.
Affected products
2- osv-coords2 versionspkg:rpm/opensuse/perl-DBI&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/perl-DBI&distro=openSUSE%20Tumbleweed
< 1.647.0-160000.5.1+ 1 more
- (no CPE)range: < 1.647.0-160000.5.1
- (no CPE)range: < 1.651.0-1.1
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.