CVE-2026-32710

NameCVE-2026-32710
DescriptionMariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
mariadb (PTS)bookworm1:10.11.14-0+deb12u2vulnerable
trixie1:11.8.6-0+deb13u1fixed
forky1:11.8.6-3fixed
sid1:11.8.6-4fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
mariadbsourcetrixie1:11.8.6-0+deb13u1
mariadbsource(unstable)1:11.8.6-1

Notes

https://github.com/MariaDB/server/security/advisories/GHSA-4rj5-2227-9wgc
https://jira.mariadb.org/browse/MDEV-38356

Search for package or bug name: Reporting problems