NULL Pointer Dereference in DBI Module for Perl by DBD::File
CVE-2019-20919

4.7MEDIUM

Key Information:

Vendor: Perl
Status: Dbi
Vendor: CVE Published:; 17 September 2020

What is CVE-2019-20919?

An issue in the DBI module before version 1.643 for Perl was identified where a NULL pointer dereference can occur. The issue stems from the hv_fetch() function, which is supposed to check for NULL values. However, subsequent calls to SvOK(profile) do not correctly handle cases where a NULL pointer is present, potentially leading to application crashes and instability.