CVE-2026-44172

Name of the Vulnerable Software and Affected Versions MariaDB server versions 3.3.18 MariaDB server versions 3.4.8

Description An issue exists where applications using the big5 character set and text protocol are susceptible to SQL injections. This occurs when non-validated user input is processed by the mysql real escape string() function, which fails to properly prevent the injection in this specific configuration.

Recommendations Update MariaDB server version 3.3.18 to 3.3.19. Update MariaDB server version 3.4.8 to 3.4.9.