CVE-2026-119281 MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the connector assumed result bytes were UTF-8 but guarded only changes to charactersetclient. It did not reject non-UTF-8 charactersetresults changes an...

CVE-2026-119281

The MariaDB Connector/J (versions 3.0.0 through 3.3.7, 3.4.5, and 3.5.11) is vulnerable to an encoding issue where the connector incorrectly assumed result bytes were UTF-8 while failing to reject non-UTF-8 character_set_results changes. Because it relied on the server's global session_track_syst...

CVE-2026-119281: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the connector assumed result bytes were UTF-8 but guarded only changes to charactersetclient. It did not reject non-UTF-8 charactersetresults changes an...