In Perl DBI versions prior to 1.652, the preparse function reserves seven output bytes per input byte for placeholder expansion. The numeric placeholder ':N' is parsed using atoi without range checking, allowing a large value such as ':2147483648' to wrap to a negative integer (-2147483648). This negative binder counter causes subsequent '?' placeholders to expand into strings that exceed the allocated buffer size, resulting in a heap out-of-bounds write. The vulnerability affects callers that preparse untrusted statements into ':pN' style placeholders. Other return styles like '?' and '%s' that compare parsed numbers against expected sequences are not affected.

This vulnerability can lead to heap corruption due to out-of-bounds writes, potentially causing crashes or memory corruption in applications using affected DBI versions. There is no indication of known exploits in the wild. The impact is limited to scenarios where untrusted input is parsed into ':pN' style placeholders.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid preparsing untrusted statements into ':pN' style placeholders in affected DBI versions. Monitor vendor channels for updates and apply official patches once released.