MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.
CVSS Details
- CVSS 3.1 Base Score: 8.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mariadb | Jul 23, 2026 | Jul 23, 2026 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | May 6, 2026 | Mar 20, 2026 |
| Oracle_linux | — | Upgrade mariadb11.8-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb11.8-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb11.8-oqgraph-engineUpgrade mariadb11.8-embeddedUpgrade mariadb11.8-backupUpgrade mariadb11.8-testUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb11.8-serverUpgrade mariadb11.8-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb11.8-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb11.8-server-utilsUpgrade mariadbUpgrade mariadb11.8-pamUpgrade mariadb11.8-errmsgUpgrade galeraUpgrade mariadb-client-utilsUpgrade mariadb-embeddedUpgrade mariadb11.8-develUpgrade mariadb11.8Upgrade mariadb-testUpgrade mariadb11.8-client-utilsUpgrade mariadb-errmsg | Oct 22, 2026 | Mar 20, 2026 |
| Redhat_linux | — | Upgrade mariadb-test-debuginfoUpgrade mariadb11.8-oqgraph-engineUpgrade mariadb-server-galera-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-backup-debuginfoUpgrade mariadb11.8-errmsgUpgrade mariadb11.8-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb11.8-backupUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb11.8-develUpgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade mariadb11.8-server-debuginfoUpgrade mariadb11.8-server-utilsUpgrade mariadb-embedded-debuginfoUpgrade mariadb11.8-client-utilsUpgrade mariadbUpgrade mariadb-debugsourceUpgrade mariadb-pamUpgrade mariadb11.8-commonUpgrade mariadb-gssapi-serverUpgrade mariadb11.8-pamUpgrade mariadb11.8-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb11.8-serverUpgrade mariadb11.8-debugsourceUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb11.8-debuginfoUpgrade mariadb11.8-embedded-develUpgrade mariadb-pam-debuginfoUpgrade mariadb-client-utilsUpgrade mariadb11.8-test-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb11.8-oqgraph-engine-debuginfoUpgrade mariadb11.8-testUpgrade mariadb11.8Upgrade mariadb-serverUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb11.8-embeddedUpgrade mariadb-backupUpgrade mariadb11.8-embedded-debuginfoUpgrade mariadb11.8-pam-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb11.8-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-test | May 20, 2026 | Mar 20, 2026 |
| Rocky_linux | — | Upgrade mariadb11.8-oqgraph-engineUpgrade mariadb-server-galera-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-develUpgrade mariadb11.8-testUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb11.8-server-galeraUpgrade mariadb11.8-backupUpgrade mariadb11.8-pamUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade mariadb11.8-server-debuginfoUpgrade mariadb11.8-backup-debuginfoUpgrade mariadb11.8-test-debuginfoUpgrade mariadbUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb11.8-develUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb11.8Upgrade mariadb11.8-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb11.8-pam-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb11.8-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb11.8-embeddedUpgrade galera-debuginfoUpgrade mariadb-embeddedUpgrade mariadb11.8-gssapi-serverUpgrade mariadb11.8-debugsourceUpgrade mariadb11.8-embedded-debuginfoUpgrade mariadb-pamUpgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb11.8-oqgraph-engine-debuginfoUpgrade mariadb11.8-embedded-develUpgrade galera-debugsource | Jun 1, 2026 | May 28, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub