CVE-2026-14739: DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders
DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.650-1 - Upgrade
Upgrade
DBI (Perl)to a version that resolves this vulnerability.Fixed in 1.650Patch CVE-2026-10879
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14739?
CVE-2026-14739 has a risk score of 43, indicating a moderate severity level.
How do I fix CVE-2026-14739?
To fix CVE-2026-14739, upgrade to DBI version 1.650 or later which imposes a limit on the number of placeholders.
What type of vulnerability is CVE-2026-14739?
CVE-2026-14739 is a heap overflow vulnerability caused by an unbounded number of SQL placeholders.
Which software is affected by CVE-2026-14739?
CVE-2026-14739 affects versions of the Perl DBI library prior to 1.650.
What is the main risk associated with CVE-2026-14739?
The main risk of CVE-2026-14739 is potential memory corruption due to heap overflow when using excessive SQL placeholders.