CVE-2026-32710

CVE-2026-32710 MariaDBJSONSCHEMAVALID 中的堆缓冲区溢出 → 持久化权限提升 → UDF 远程代码执行 | ---|--- 受影响版本| MariaDB 11.4.x（已在 11.4.9 上确认） 漏洞| jsongetnormalizedstring 中的越界写入 — strncpy 写入 128 字节的 DYNAMICSTRING，无边界检查 影响| 仅具有 SELECT 权限的用户 → ALL PRIVILEGES WITH GRANT OPTION → 通过 UDF 执行任意命令 源码位置| sql/jsonschemahelper.cc:91...

Rocky Linux 9 [CIQ] Security Update: galera / galera-debuginfo / galera-debugsource / mariadb / etc (crlsa-2026_19182)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619182 advisory. MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSONSCHEMAVALID function vulnerability CVE-2026-32710 Tenable has extracted the preceding...

Rocky Linux 10.2 [CIQ] Security Update: galera / galera-debuginfo / galera-debugsource / mariadb11.8 / etc (crlsa-2026_19021)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619021 advisory. MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSONSCHEMAVALID function vulnerability CVE-2026-32710 Tenable has extracted the preceding...

CVE-2026-32710: Heap-based Buffer Overflow

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...