Summaryinfo

A vulnerability was found in MariaDB Server up to 11.4.9/11.8.5/12.2.1. It has been declared as critical. Affected is the function JSON_SCHEMA_VALID. Executing a manipulation can lead to heap-based overflow. This vulnerability is registered as CVE-2026-32710. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability has been found in MariaDB Server up to 11.4.9/11.8.5/12.2.1 and classified as critical. This vulnerability affects the function JSON_SCHEMA_VALID. The manipulation with an unknown input leads to a heap-based overflow vulnerability. The CWE definition for the vulnerability is CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-32710 since 03/13/2026. The exploitation appears to be difficult. The attack can be initiated remotely. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 303254 (Linux Distros Unpatched Vulnerability : CVE-2026-32710), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 11.4.10, 11.8.6 or 12.2.2 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (303254), EUVD (EUVD-2026-13764) and CERT Bund (WID-SEC-2026-0815). Once again VulDB remains the best source for vulnerability data.

Affected

• MariaDB MariaDB

Productinfo

Type

• Database Software

Vendor

• MariaDB

Name

• Server

Version

• 11.4.0
• 11.4.1
• 11.4.2
• 11.4.3
• 11.4.4
• 11.4.5
• 11.4.6
• 11.4.7
• 11.4.8
• 11.4.9
• 11.8.0
• 11.8.1
• 11.8.2
• 11.8.3
• 11.8.4
• 11.8.5
• 12.2.0
• 12.2.1

License

• open-source

Website

• Product: https://github.com/MariaDB/server/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion