CVE-2026-88815 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv

Medium 6.2 Published 28 Sep 2026 Updated 30 Sep 2026

An attacker can cause a segmentation fault and denial of service by passing numeric values to the sql_type_cast function in the Perl DBI library.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2026-88815?

CVE-2026-88815 is a medium-severity vulnerability in perl-DBI, published on 28 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv.

When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault.

This is reachable in Perl using the sql_type_cast function:

my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 );

Weakness: CWE-843

Which versions are affected by CVE-2026-88815?

Linux distribution packages (20)

`perl-DBI` AlmaLinux:10	All versions	`1.643-26.el10_2.7`
`perl-DBI` AlmaLinux:8	All versions	`1.641-11.module_el8.10.0+4309+f7cd2555`
`perl-DBI` AlmaLinux:8	All versions	`1.641-4.el8_10`
`perl-DBI` AlmaLinux:9	All versions	`1.643-9.el9_8.7`
`perl-DBI` Red Hat:enterprise_linux:10.2	All versions	`0:1.643-26.el10_2.7`
`perl-DBI-debuginfo` Red Hat:enterprise_linux:10.2	All versions	`0:1.643-26.el10_2.7`
`perl-DBI-debugsource` Red Hat:enterprise_linux:10.2	All versions	`0:1.643-26.el10_2.7`
`perl-DBI` Red Hat:enterprise_linux:8::baseos	All versions	`0:1.641-4.el8_10`
`perl-DBI-debuginfo` Red Hat:enterprise_linux:8::baseos	All versions	`0:1.641-4.el8_10`
`perl-DBI-debugsource` Red Hat:enterprise_linux:8::baseos	All versions	`0:1.641-4.el8_10`
`perl-DBI` Red Hat:enterprise_linux:9::appstream	All versions	`0:1.643-9.el9_8.7`
`perl-DBI-debuginfo` Red Hat:enterprise_linux:9::appstream	All versions	`0:1.643-9.el9_8.7`
`perl-DBI-debugsource` Red Hat:enterprise_linux:9::appstream	All versions	`0:1.643-9.el9_8.7`
`perl-DBI` Rocky Linux:10	All versions	`0:1.643-26.el10_2.7`
`perl-DBI` Rocky Linux:8	All versions	`0:1.641-11.module+el8.10.0+40389+22ad89a7`
`perl-DBI` Rocky Linux:8	All versions	`0:1.641-11.module+el8.10.0+40389+69d937a8`
`perl-DBI` Rocky Linux:8	All versions	`0:1.641-11.module+el8.10.0+40389+75d7e2a7`
`perl-DBI` Rocky Linux:8	All versions	`0:1.641-11.module+el8.10.0+40389+be9de675`
`perl-DBI` Rocky Linux:8	All versions	`0:1.641-4.el8_10`
`perl-DBI` Rocky Linux:9	All versions	`0:1.643-9.el9_8.7`

How do I fix CVE-2026-88815?

Upgrade to a fixed version.

Is CVE-2026-88815 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-88815 exists.

Sources

Also known as ALSA-2026:76760, ALSA-2026:76762, ALSA-2026:77576, ALSA-2026:85916, AZL-105212, BELL-CVE-2026-88815 and 14 more.