by Kastro
Paper/Archive/CVE-2026-32710

CVE-2026-32710

MariaDB server — Heap-based Buffer Overflow in MariaDB

EPSS 0.9%CVSS 9.9
critical.is priorityof 100
42
CVSS 9.9 (NVD)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 58.9.589 × 2011.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

Affected

ProductAffectedFixed inSource
server>= 11.4.1, < 11.4.10–CNA
server>= 11.8.1, < 11.8.6–CNA
server>= 12.1.2, < 12.2.2–CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
GitHub_M (CNA)8.6CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/MariaDB/server/security/advisories/GHSA-4rj5-2227-9wgcrefjira.mariadb.org/browse/MDEV-38356