Dbi · Dbi · CVE-2026-14740
**Name of the Vulnerable Software and Affected Versions**
DBI versions prior to 1.650
**Description**
An out-of-bounds read of one byte occurs in the `preparse()` function when deleting an initial SQL comment. This happens during the normalization of SQL and the removal of comments. On memory-hardened builds, this results in a fault, while on normal builds, it leads to nondeterministic newline retention.
**Recommendations**
Update to version 1.650 or later.