CVE-2026-88816

A flaw was found in perl-DBI. An attacker or user capable of supplying a numeric value to the FetchHashKeyName attribute can cause a Denial of Service (DoS). The fetchrow_hashref function attempts to use the attribute value as a string pointer without stringifying it first, leading to an invalid memory read and triggering a segmentation fault that crashes the application.

Last checked: 2026-09-30 21:40 UTC

• No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 19:51 UTC)

References

• NVD: CVE-2026-88816
• Upstream Advisory

Fix Status by Distribution

Fix evidence last checked: 2026-10-22 06:25 UTC