CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

EUVD-2026-102940

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

CVE-2026-85746

The MariaDB server (versions 10.6.1-10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2) is vulnerable to an out-of-bound buffer write in the ST_AsText function. This occurs during the conversion of deeply nested GeometryCollections because the recursive WKT serialization fails to reserve suff...