cve/2019/CVE-2019-20919.md

### [CVE-2019-20919](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20919)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL and the code does that. But, shortly thereafter, it calls SvOK(profile), causing a NULL pointer dereference.

### POC

#### Reference
- https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.643-...

#### Github
No PoCs found on GitHub currently.