{
  "cveId": "CVE-2026-73194",
  "url": "https://patchblox.com/security/cve/CVE-2026-73194",
  "summary": "CVE-2026-73194 is fixed in 5 products on 1 platform, first by libdbi-perl 1.640-1ubuntu0.3\u002Besm3, released August 15, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse",
  "description": "DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse.  preparse reserves seven output bytes per input byte, the width of the longest \u0027:p99999\u0027 expansion. The \u0027:N\u0027 branch parses the number with \u0060atoi(src)\u0060 and assigns it to the binder counter with no range check, so a statement containing \u0027:2147483648\u0027 leaves the counter negative (-2147483648 with glibc, where atoi wraps). Each following \u0027?\u0027 then expands through \u0060sprintf(start, \u0022:p%d\u0022, idx\u002B\u002B)\u0060 to \u0027:p-2147483648\u0027, 14 bytes with the terminating NUL where the buffer budgets 7. The placeholder limit added in 1.650 tests the counter against 99,999, which a negative counter passes.  Any caller that preparses an untrusted statement into \u0027:pN\u0027 style placeholders gets a heap out-of-bounds write that grows with the number of \u0027?\u0027 marks following the poisoned placeholder. The \u0027?\u0027 and \u0027%s\u0027 return styles compare the parsed number against the expected sequence and error out, and are unaffected.",
  "published": "2026-08-15T06:17:00Z",
  "severity": "Important",
  "cvss": 9.1,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
  "cwe": "Improper Validation of Specified Quantity in Input",
  "epss": 0.00493,
  "epssPercentile": 0.42589,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73194",
  "fixes": [
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1.643-4\u002Bdeb12u2",
      "fix": "DEBIAN-CVE-2026-73194",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-73194",
      "released": "2026-08-25T00:08:54Z"
    },
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.652-2~deb13u1",
      "fix": "DEBIAN-CVE-2026-73194",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-73194",
      "released": "2026-08-25T00:08:54Z"
    },
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Debian 14",
      "fixedVersion": "1.652-1",
      "fix": "DEBIAN-CVE-2026-73194",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-73194",
      "released": "2026-08-25T00:08:54Z"
    },
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.640-1ubuntu0.3\u002Besm3",
      "fix": "libdbi-perl 1.640-1ubuntu0.3\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libdbi-perl-1.640-1ubuntu0.3-esm3",
      "released": "2026-08-15T06:17:00Z"
    },
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.643-1ubuntu0.1\u002Besm3",
      "fix": "libdbi-perl 1.643-1ubuntu0.1\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libdbi-perl-1.643-1ubuntu0.1-esm3",
      "released": "2026-08-15T06:17:00Z"
    },
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.643-3ubuntu0.3",
      "fix": "libdbi-perl 1.643-3ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libdbi-perl-1.643-3ubuntu0.3",
      "released": "2026-08-15T06:17:00Z"
    },
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "1.643-4ubuntu0.3",
      "fix": "libdbi-perl 1.643-4ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libdbi-perl-1.643-4ubuntu0.3",
      "released": "2026-08-15T06:17:00Z"
    },
    {
      "platform": "linux",
      "product": "libdbi-perl",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "1.647-1ubuntu0.26.04.3",
      "fix": "libdbi-perl 1.647-1ubuntu0.26.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libdbi-perl-1.647-1ubuntu0.26.04.3",
      "released": "2026-08-15T06:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "RHEL 10",
      "fixedVersion": "1.643-26.el10_2.6",
      "fix": "RHSA-2026:70753",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-70753",
      "released": "2026-08-15T12:09:22Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "RHEL 8",
      "fixedVersion": "0:1.641-3.el8_10",
      "fix": "RHSA-2026:71608",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-71608",
      "released": "2026-09-22T19:07:45Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "RHEL 9",
      "fixedVersion": "0:1.643-9.el9_8.6",
      "fix": "RHSA-2026:71422",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-71422",
      "released": "2026-09-24T19:32:44Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "almalinux 10",
      "fixedVersion": "1.643-26.el10_2.6",
      "fix": "ALSA-2026:70753",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-70753",
      "released": "2026-09-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "almalinux 8",
      "fixedVersion": "1.641-3.el8_10",
      "fix": "ALSA-2026:71608",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-71608",
      "released": "2026-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "almalinux 9",
      "fixedVersion": "1.643-9.el9_8.6",
      "fix": "ALSA-2026:71422",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-71422",
      "released": "2026-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "amzn 2023",
      "fixedVersion": "1.652-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-2075",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2075",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "ol 10",
      "fixedVersion": "0:1.643-26.el10_2.6",
      "fix": "ELSA-2026-70753",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-70753",
      "released": "2026-09-23T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "ol 8",
      "fixedVersion": "0:1.641-10.module\u002Bel8.10.0\u002B91039\u002B7b6b05e5",
      "fix": "ELSA-2026-69112",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-69112",
      "released": "2026-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "ol 9",
      "fixedVersion": "0:1.643-9.el9_8.6",
      "fix": "ELSA-2026-71422",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-71422",
      "released": "2026-09-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "rocky 10",
      "fixedVersion": "0:1.643-26.el10_2.6",
      "fix": "RLSA-2026:70753",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-70753",
      "released": "2026-09-23T18:07:43Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "rocky 8",
      "fixedVersion": "0:1.641-3.el8_10",
      "fix": "RLSA-2026:71608",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-71608",
      "released": "2026-09-26T06:01:07Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI",
      "release": "rocky 9",
      "fixedVersion": "0:1.643-9.el9_8.6",
      "fix": "RLSA-2026:71422",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-71422",
      "released": "2026-09-25T18:04:58Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.652-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-2075",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2075",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1.652-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-2075",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2075",
      "released": "2026-08-31T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-DBI-tests",
      "release": "amzn 2023",
      "fixedVersion": "1.652-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-2075",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2075",
      "released": "2026-08-31T09:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}