High severity8.0NVD Advisory· Published Oct 9, 2026
CVE-2026-107821
CVE-2026-107821
Description
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
9- github.com/MariaDB/server/commit/3b1c2e58abab5571bec4ff52773ddc75b1738da9nvd
- github.com/MariaDB/server/releases/tag/mariadb-10.11.19nvd
- github.com/MariaDB/server/releases/tag/mariadb-10.6.28nvd
- github.com/MariaDB/server/releases/tag/mariadb-11.4.13nvd
- github.com/MariaDB/server/releases/tag/mariadb-11.8.9nvd
- github.com/MariaDB/server/releases/tag/mariadb-12.3.3nvd
- github.com/MariaDB/server/releases/tag/mariadb-13.0.2nvd
- github.com/MariaDB/server/security/advisories/GHSA-c4gx-34mg-95q5nvd
- jira.mariadb.org/browse/MDEV-40571nvd
News mentions
0No linked articles in our index yet.