{"id":"CVE-2026-107821","aliases":["BELL-CVE-2026-107821","BIT-mariadb-2026-107821","BIT-mariadb-min-2026-107821","BIT-mysql-client-2026-107821","DEBIAN-CVE-2026-107821","EUVD-2026-95921","GHSA-c4gx-34mg-95q5","RHSA-2026:83108","RHSA-2026:84689","ROOT-OS-DEBIAN-12-CVE-2026-107821","ROOT-OS-DEBIAN-13-CVE-2026-107821","UBUNTU-CVE-2026-107821","openSUSE-SU-2026:12245-1"],"status":"published","title":"MariaDB: insufficient validation of binary frm data when opening a table","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01202,"percentile":0.68651,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-1285"],"published":"2026-10-09T17:27:16Z","modified":"2026-10-28T10:46:01Z","exploits":[{"source":"pocgithub","id":"pinebudweiser/CVE-2026-107821-PoC","title":"pinebudweiser/CVE-2026-107821-PoC","date":"2026-09-10","url":"https://github.com/pinebudweiser/CVE-2026-107821-PoC"}],"fixes":[{"ecosystem":"Alpaquita:23","package":"mariadb","fixed_in":["10.6.28-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"mariadb","fixed_in":["11.4.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"mariadb","fixed_in":["11.8.9-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mariadb","fixed_in":["10.6.28","10.11.19","11.4.13","11.8.9","12.3.3","13.0.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mariadb-min","fixed_in":["10.6.28","10.11.19","11.4.13","11.8.9","12.3.3","13.0.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mysql-client","fixed_in":["10.6.28","10.11.19","11.4.13","11.8.9","12.3.3","13.0.2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mariadb","fixed_in":["1:11.8.9+ds-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"mariadb","fixed_in":["1:10.11.19-0+deb12u1.aikido.12","1:10.11.19-0+deb12u1.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-mariadb","fixed_in":["1:10.11.19-0+deb12u1.aikido.12","1:10.11.19-0+deb12u1.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"mariadb","fixed_in":["1:11.8.6-0+deb13u1.aikido.9","1:11.8.6-0+deb13u1.aikido.10","1:11.8.6-0+deb13u1.aikido.11","1:11.8.6-0+deb13u1.aikido.12"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-mariadb","fixed_in":["1:11.8.6-0+deb13u1.aikido.9","1:11.8.6-0+deb13u1.aikido.10","1:11.8.6-0+deb13u1.aikido.11","1:11.8.6-0+deb13u1.aikido.12"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:23","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.6.12-r0"},{"fixed":"10.6.28-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.4.5-r0"},{"fixed":"11.4.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.11.4-r0"},{"fixed":"11.8.9-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mariadb","ranges":[{"type":"SEMVER","events":[{"introduced":"10.6.1"},{"fixed":"10.6.28"},{"introduced":"10.11.1"},{"fixed":"10.11.19"},{"introduced":"11.4.1"},{"fixed":"11.4.13"},{"introduced":"11.8.1"},{"fixed":"11.8.9"},{"introduced":"12.3.1"},{"fixed":"12.3.3"},{"introduced":"13.0.1"},{"fixed":"13.0.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mariadb-min","ranges":[{"type":"SEMVER","events":[{"introduced":"10.6.1"},{"fixed":"10.6.28"},{"introduced":"10.11.1"},{"fixed":"10.11.19"},{"introduced":"11.4.1"},{"fixed":"11.4.13"},{"introduced":"11.8.1"},{"fixed":"11.8.9"},{"introduced":"12.3.1"},{"fixed":"12.3.3"},{"introduced":"13.0.1"},{"fixed":"13.0.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mysql-client","ranges":[{"type":"SEMVER","events":[{"introduced":"10.6.1"},{"fixed":"10.6.28"},{"introduced":"10.11.1"},{"fixed":"10.11.19"},{"introduced":"11.4.1"},{"fixed":"11.4.13"},{"introduced":"11.8.1"},{"fixed":"11.8.9"},{"introduced":"12.3.1"},{"fixed":"12.3.3"},{"introduced":"13.0.1"},{"fixed":"13.0.2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.11.11-0+deb12u1","1:10.11.13-0+deb12u1","1:10.11.14-0+deb12u1","1:10.11.14-0+deb12u2","1:10.11.18-0+deb12u1","1:10.11.19-0+deb12u1","1:10.11.3-1","1:10.11.3-2~exp1","1:10.11.4-1","1:10.11.4-1~deb12u1","1:10.11.5-1","1:10.11.5-2","1:10.11.5-3","1:10.11.6-0+deb12u1","1:10.11.6-1","1:10.11.6-2","1:10.11.6-2.1~exp1","1:10.11.7-1","1:10.11.7-2","1:10.11.7-3","1:10.11.7-4","1:10.11.8-1","1:10.11.9-0+deb12u1","1:11.4.2-1","1:11.4.2-2","1:11.4.2-3","1:11.4.2-4","1:11.4.3-1","1:11.4.4-1","1:11.4.4-2","1:11.4.4-3","1:11.4.5-1","1:11.4.5-2~exp1","1:11.8.1-1","1:11.8.1-2","1:11.8.1-3","1:11.8.1-4","1:11.8.1-5","1:11.8.2-1","1:11.8.3-1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-3~exp1","1:11.8.5-3~exp2","1:11.8.5-3~exp3","1:11.8.5-4","1:11.8.6-1","1:11.8.6-2","1:11.8.6-3","1:11.8.6-4","1:11.8.6-5","1:11.8.6-6","1:11.8.8-1","1:11.8.9+ds-1","1:11.8.9+ds-2","1:11.8.9+ds-3","1:11.8.9+ds-4"]},{"source":"osv","ecosystem":"Debian:13","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:11.8.2-1","1:11.8.3-0+deb13u1","1:11.8.3-1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-3~exp1","1:11.8.5-3~exp2","1:11.8.5-3~exp3","1:11.8.5-4","1:11.8.6-0+deb13u1","1:11.8.6-1","1:11.8.6-2","1:11.8.6-3","1:11.8.6-4","1:11.8.6-5","1:11.8.6-6","1:11.8.8-0+deb13u1","1:11.8.8-1","1:11.8.9+ds-1","1:11.8.9+ds-2","1:11.8.9+ds-3","1:11.8.9+ds-4"]},{"source":"osv","ecosystem":"Debian:14","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.9+ds-1"}]}],"versions":["1:11.8.2-1","1:11.8.3-1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-3~exp1","1:11.8.5-3~exp2","1:11.8.5-3~exp3","1:11.8.5-4","1:11.8.6-1","1:11.8.6-2","1:11.8.6-3","1:11.8.6-4","1:11.8.6-5","1:11.8.6-6","1:11.8.8-1"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-client-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-connect-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-cracklib-password-check","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-gssapi-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-oqgraph-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-rocksdb-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-s3-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-server-galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-server-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-sphinx-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb10.11-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.11.18-4.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-client-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-connect-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-cracklib-password-check","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-duckdb-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-gssapi-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-oqgraph-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-rocksdb-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-s3-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-server-galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-server-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-sphinx-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mariadb11.8-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.8.9-0.1.hum1"}]}],"bundled":12},{"source":"osv","ecosystem":"Root:Debian:12","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.11.19-0+deb12u1.aikido.12"},{"fixed":"1:10.11.19-0+deb12u1.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.11.19-0+deb12u1.aikido.12"},{"fixed":"1:10.11.19-0+deb12u1.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.6-0+deb13u1.aikido.9"},{"fixed":"1:11.8.6-0+deb13u1.aikido.10"},{"fixed":"1:11.8.6-0+deb13u1.aikido.11"},{"fixed":"1:11.8.6-0+deb13u1.aikido.12"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.6-0+deb13u1.aikido.9"},{"fixed":"1:11.8.6-0+deb13u1.aikido.10"},{"fixed":"1:11.8.6-0+deb13u1.aikido.11"},{"fixed":"1:11.8.6-0+deb13u1.aikido.12"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mariadb-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.0.20-0ubuntu0.15.04.1","10.0.22-0ubuntu1","10.0.23-1","10.0.23-2","10.0.24-7","10.0.25-0ubuntu0.16.04.1","10.0.27-0ubuntu0.16.04.1","10.0.28-0ubuntu0.16.04.1","10.0.29-0ubuntu0.16.04.1","10.0.31-0ubuntu0.16.04.2","10.0.33-0ubuntu0.16.04.1","10.0.34-0ubuntu0.16.04.1","10.0.36-0ubuntu0.16.04.1","10.0.38-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mariadb-10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.1.25-1","1:10.1.29-6","1:10.1.34-0ubuntu0.18.04.1","1:10.1.38-0ubuntu0.18.04.1","1:10.1.38-0ubuntu0.18.04.2","1:10.1.40-0ubuntu0.18.04.1","1:10.1.41-0ubuntu0.18.04.1","1:10.1.43-0ubuntu0.18.04.1","1:10.1.44-0ubuntu0.18.04.1","1:10.1.47-0ubuntu0.18.04.1","1:10.1.48-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mariadb-10.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.3.17-1","1:10.3.18-1","1:10.3.19-1","1:10.3.21-2","1:10.3.22-1","1:10.3.22-1ubuntu1","1:10.3.25-0ubuntu0.20.04.1","1:10.3.29-0ubuntu0.20.04.1","1:10.3.30-0ubuntu0.20.04.1","1:10.3.31-0ubuntu0.20.04.1","1:10.3.32-0ubuntu0.20.04.1","1:10.3.34-0ubuntu0.20.04.1","1:10.3.37-0ubuntu0.20.04.1","1:10.3.38-0ubuntu0.20.04.1","1:10.3.39-0ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mariadb-10.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.6.7-2ubuntu1","1:10.6.7-2ubuntu1.1","1:10.6.11-0ubuntu0.22.04.1","1:10.6.12-0ubuntu0.22.04.1","1:10.6.16-0ubuntu0.22.04.1","1:10.6.18-0ubuntu0.22.04.1","1:10.6.21-0ubuntu0.22.04.2","1:10.6.22-0ubuntu0.22.04.1","1:10.6.23-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.11.4-1","1:10.11.5-3","1:10.11.6-1","1:10.11.6-2","1:10.11.7-2ubuntu1","1:10.11.7-2ubuntu2","1:10.11.8-0ubuntu0.24.04.1","1:10.11.11-0ubuntu0.24.04.2","1:10.11.13-0ubuntu0.24.04.1","1:10.11.14-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:11.8.6-5","1:11.8.8-1","1:11.8.9+ds-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:11.8.3-1build1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-4","1:11.8.6-1","1:11.8.6-3","1:11.8.6-4","1:11.8.6-5","1:11.8.6-5ubuntu0.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.2-3.1"}]}],"bundled":22}],"products":[{"vendor":"devolutions","product":"server"},{"vendor":"mariadb","product":"mariadb"},{"vendor":"mariadb","product":"server"}],"references":[{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-c4gx-34mg-95q5","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","article","report"]},{"url":"https://github.com/MariaDB/server/commit/3b1c2e58abab5571bec4ff52773ddc75b1738da9","tags":["x_refsource_MISC","Patch","fix","article","report"]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19","tags":["x_refsource_MISC","Release Notes","article","web","report"]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28","tags":["x_refsource_MISC","Release Notes","article","web","report"]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13","tags":["x_refsource_MISC","Release Notes","article","web","report"]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9","tags":["x_refsource_MISC","Release Notes","article","web","report"]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3","tags":["x_refsource_MISC","Release Notes","article","web","report"]},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2","tags":["x_refsource_MISC","Release Notes","article","web","report"]},{"url":"https://jira.mariadb.org/browse/MDEV-40571","tags":["x_refsource_MISC","Issue Tracking","report","web","article"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-107821","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107821","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-107821.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-107821","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:83108","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107814","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107815","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107816","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107817","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107818","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107821","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107822","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107823","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83108.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107814","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107814","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/commit/d842d6e994a8b0d67c280bf785a11357d6b316a2","tags":["article"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-m5gf-432r-g5jw","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548718","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107815","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107815","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/commit/b369925f6855d3e1f0ebcf453492724b99fda6f8","tags":["article"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-4wgx-ffg9-jrwq","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40637","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548739","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107816","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107816","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e","tags":["article"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40670","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548737","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107817","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907","tags":["article"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40678","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548736","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107818","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107818","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/commit/e3d62d4e78fd4941cef3f5053e6a50d0b32d740e","tags":["article"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-mhvc-vqcq-7vq5","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40629","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548734","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107821","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548738","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107822","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107822","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/commit/67ea07dd3400004e4f7ae01bf977f4344bbe064b","tags":["article"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-2m85-2x26-36rf","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40541","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107823","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107823","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/commit/8a642bc8103aadc6b2087d781ba8e1595616a2c4","tags":["article"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-g2q2-3936-cp37","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40484","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:84689","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-97380","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-86047","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-85985","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-85745","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84689.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553280","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-85745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85745","tags":["advisory"]},{"url":"https://hackerone.com/reports/3856148","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40328","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554196","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-85985","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85985","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/commit/4f66ca1b69daf1b7e6a562ca8e86d77a6a70abfe","tags":["article"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-2245-9hm3-wxf6","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40323","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554208","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86047","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/commit/2b28d1c424104429eeed43115ee6d8a803671d52","tags":["article"]},{"url":"https://github.com/MariaDB/server/commit/3646569225758c8225e7342783d775ef7c7570e5","tags":["article"]},{"url":"https://github.com/MariaDB/server/commit/5acb43522863c9bd6b91f354104ea247bf513e9a","tags":["article"]},{"url":"https://github.com/MariaDB/server/commit/9d4ffe23b25808f7858b2dc48106fbd60cf0e513","tags":["article"]},{"url":"https://github.com/MariaDB/server/commit/d5d741a3076f911b468518d6b06a917593498c5b","tags":["article"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-wxr3-wm3p-7w6p","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-39776","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-39818","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40308","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40311","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40312","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97380","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97380","tags":["advisory"]},{"url":"https://github.com/MariaDB/server/commit/dbd60d0ad8daa2d01050346aa50b7b102490e456","tags":["article"]},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr","tags":["article"]},{"url":"https://jira.mariadb.org/browse/MDEV-40470","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2026-107821","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-102523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-85745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-85746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-85748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-85985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-86047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-97380","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-107821","title":"MariaDB: insufficient validation of binary frm data when opening a table","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","status":"published","published":"2026-10-09T17:27:16.316Z","modified":"2026-10-09T17:42:29.482Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-1285"],"updated_at":"2026-11-02T13:45:14.072357Z"}],"euvd":[{"id":"EUVD-2026-95921","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","status":"published","published":"2026-10-09T17:27:16Z","modified":"2026-10-09T17:42:29Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:24.64208Z"}],"nvd":[{"id":"CVE-2026-107821","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","status":"published","published":"2026-10-09T18:17:03.86Z","modified":"2026-10-14T14:13:07.733Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-1285"],"updated_at":"2026-11-02T14:12:55.473789Z"}],"osv":[{"id":"BELL-CVE-2026-107821","status":"published","published":"2026-10-10T06:05:10.74645Z","modified":"2026-10-17T07:15:03.13597232Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"CVE-2026-107821","title":"MariaDB: insufficient validation of binary frm data when opening a table","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","status":"published","published":"2026-10-09T17:27:16.316Z","modified":"2026-10-28T10:46:01.600576509Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-1285"],"updated_at":"2026-11-02T15:44:54.933106Z"},{"id":"DEBIAN-CVE-2026-107821","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","status":"published","published":"2026-10-09T18:17:03.86Z","modified":"2026-10-15T10:01:55.226487329Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:49.381767Z"},{"id":"RHSA-2026:83108","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-10-15T10:28:54Z","modified":"2026-10-20T10:17:10Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:84689","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-10-20T10:17:43Z","modified":"2026-10-20T10:43:37.347030984Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"UBUNTU-CVE-2026-107821","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","status":"published","published":"2026-10-09T18:17:00Z","modified":"2026-10-17T12:58:02.21886069Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:59.130573Z"},{"id":"BIT-mariadb-2026-107821","title":"MariaDB: insufficient validation of binary frm data when opening a table","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","status":"published","published":"2026-10-16T08:41:59.276Z","modified":"2026-10-16T09:55:34.353855516Z","updated_at":"2026-11-02T15:28:32.645004Z"},{"id":"BIT-mariadb-min-2026-107821","title":"MariaDB: insufficient validation of binary frm data when opening a table","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","status":"published","published":"2026-10-16T08:42:04.879Z","modified":"2026-10-16T09:55:34.353855516Z","updated_at":"2026-11-02T15:28:32.645004Z"},{"id":"BIT-mysql-client-2026-107821","title":"MariaDB: insufficient validation of binary frm data when opening a table","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a crafted FRM file in the data directory could trigger out-of-bounds reads or writes, crash the server, or potentially execute code. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","status":"published","published":"2026-10-16T08:44:20.889Z","modified":"2026-10-16T09:55:34.353855516Z","updated_at":"2026-11-02T15:28:33.469426Z"},{"id":"openSUSE-SU-2026:12245-1","title":"libmariadbd-devel-12.3.2-3.1 on GA media","description":"These are all security issues fixed in the libmariadbd-devel-12.3.2-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-23T00:00:00Z","modified":"2026-10-24T17:23:11.303910676Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-107821","title":"CVE-2026-107821 in mariadb - Patched by Root","description":"Root has patched CVE-2026-107821 in the mariadb package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-10-22T10:39:02Z","modified":"2026-10-22T11:15:06.00249755Z","updated_at":"2026-11-02T15:53:31.773105Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-107821","title":"CVE-2026-107821 in mariadb - Patched by Root","description":"Root has patched CVE-2026-107821 in the mariadb package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-10-22T12:36:03Z","modified":"2026-10-22T13:15:05.227488138Z","updated_at":"2026-11-02T15:53:33.153539Z"}]}}