Security Advisory

CVE-2026-32710

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-20 18:31:48

Last updated 2026-03-27 03:55:38

Assigner GitHub_M

State PUBLISHED

Description

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

← Browse all CVEs View on cve.org ↗