CVE-2026-107817

Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server version 10.11.18 and earlier MariaDB server version 11.4.12 and earlier MariaDB server version 11.8.8 and earlier MariaDB server version 12.3.2 and earlier MariaDB server version 13.0.1 and earlier

Description The mysql json plugin incorrectly assumes that imported MySQL tables contain valid MySQL binary JSON data. A specially crafted MySQL table containing invalid JSON data can lead to out-of-bounds reads, information disclosure, or a server crash.

Recommendations Update to version 10.6.28 Update to version 10.11.19 Update to version 11.4.13 Update to version 11.8.9 Update to version 12.3.3 Update to version 13.0.2