CVE-2026-3257

UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library. UnQLite for Perl embeds the UnQLite library. Version 0.06 and earlier of the Perl module uses a version of the library from 2014 that may be vulnerable to a heap-based overflow.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - 9b29abf9-4ab0-4765-b253-1875cd9b441e

Published

2026-03-05

Last modified

2026-03-05

Weaknesses

CWE-1395

Affected products

• Unqlite (Tokuhirom)

References

• https://metacpan.org/release/TOKUHIROM/UnQLite-0.07/source/Changes
• https://unqlite.symisc.net/
• https://www.cve.org/CVERecord?id=CVE-2025-3791