CVE-2026-14740

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.650

Description An out-of-bounds read of one byte occurs in the preparse() function when deleting an initial SQL comment. This happens during the normalization of SQL and the removal of comments. On memory-hardened builds, this results in a fault, while on normal builds, it leads to nondeterministic newline retention.

Recommendations Update to version 1.650 or later.