CVE-2026-32710CWE-122

Heap-based Buffer Overflow in MariaDB

High · published March 20, 2026

CVSS v3.1
8.6
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00834 · 57.2th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-03-20T18:31Z
EPSS history
Timeline
  • 20 MAR 18:31Z
    Heap-based Buffer Overflow in MariaDB
    cvelistv5