The vulnerability in DBI::ProfileData prior to version 1.651 arises because the path index column in profile dump files is used to allocate an array without enforcing limits. An attacker can exploit this by providing a large path index value, causing the parser to allocate excessive memory. This can lead to resource exhaustion and denial of service. The CVSS v3.1 base score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability.

Successful exploitation results in high impact on availability due to unbounded memory allocation, potentially causing denial of service. There is no impact on confidentiality or integrity according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time. Users should monitor vendor communications for updates and consider limiting exposure of the vulnerable component until a fix is available.