CVE-2026-107821

Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server versions prior to 10.11.19 MariaDB server versions prior to 11.4.13 MariaDB server versions prior to 11.8.9 MariaDB server versions prior to 12.3.3 MariaDB server versions prior to 13.0.2

Description Insufficient validation of counts, offsets, lengths, and field boundaries in FRM metadata occurs when opening binary FRM files. An attacker who can place a specially crafted FRM file in the data directory may trigger out-of-bounds reads or writes, cause a server crash, or potentially execute arbitrary code.

Recommendations Update to version 10.6.28 Update to version 10.11.19 Update to version 11.4.13 Update to version 11.8.9 Update to version 12.3.3 Update to version 13.0.2