Heap-based Buffer Overflow in MariaDB(CVE-2026-32710)

概要

Heap-based Buffer Overflow in MariaDB

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami mysql-client

[{"type":"SEMVER","events":[{"introduced":"11.4.1"},{"fixed":"11.4.10"},{"introduced":"11.8.1"},{"fixed":"11.8.6"},{"introduced":"12.1.2"},{"fixed":"12.2.2"}]}]

Bitnami mariadb-min

[{"type":"SEMVER","events":[{"introduced":"11.4.1"},{"fixed":"11.4.10"},{"introduced":"11.8.1"},{"fixed":"11.8.6"},{"introduced":"12.1.2"},{"fixed":"12.2.2"}]}]

Bitnami mariadb

[{"type":"SEMVER","events":[{"introduced":"11.4.1"},{"fixed":"11.4.10"},{"introduced":"11.8.1"},{"fixed":"11.8.6"},{"introduced":"12.1.2"},{"fixed":"12.2.2"}]}]

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Debian DEBIAN-CVE-2026-32710 mariadb 修正版: 1:11.8.6-0+deb13u1

参照URL

advisory github.com
advisory jira.mariadb.org
web nvd.nist.gov