https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:18:32 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-88815 <p>DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv.</p> <p>When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault.</p> <p>This is reachable in Perl using the sql_type_cast function:</p> <p>my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 );</p> <p>DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv.</p> <p>When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault.</p> <p>This is reachable in Perl using the sql_type_cast function:</p> <p>my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 );</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-88815 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-88815 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libdbi-perl, Ubuntu:Pro:16.04:LTS: libdbi-perl, Ubuntu:Pro:18.04:LTS: libdbi-perl, Ubuntu:Pro:20.04:LTS: libdbi-perl, Ubuntu:22.04:LTS: libdbi-perl, Ubuntu:24.04:LTS: libdbi-perl, Ubuntu:26.04:LTS: libdbi-perl</p> <p>[Fix DBI::sql_type_cast on IV/NV]</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libdbi-perl, Ubuntu:Pro:16.04:LTS: libdbi-perl, Ubuntu:Pro:18.04:LTS: libdbi-perl, Ubuntu:Pro:20.04:LTS: libdbi-perl, Ubuntu:22.04:LTS: libdbi-perl, Ubuntu:24.04:LTS: libdbi-perl, Ubuntu:26.04:LTS: libdbi-perl</p> <p>[Fix DBI::sql_type_cast on IV/NV]</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-88815