MariaDB: Out-of-bounds read in MariaDB .frm parsing enables RCE via vtable hijacking

A vulnerability was discovered in MariaDB where the keypart-fieldnr value parsed from a crafted .frm file was not validated before being used as an index into the share-field array. This resulted in an out-of-bounds read, allowing an attacker to hijack the C++ virtual method call and achieve...