{"id":"CVE-2026-32710","aliases":["BELL-CVE-2026-32710","BIT-mariadb-2026-32710","BIT-mariadb-min-2026-32710","BIT-mysql-client-2026-32710","DEBIAN-CVE-2026-32710","EUVD-2026-13764","GHSA-4rj5-2227-9wgc","RHSA-2026:19021","RHSA-2026:19182","RLSA-2026:19021","RLSA-2026:19182","SUSE-SU-2026:1367-1","SUSE-SU-2026:21407-1","UBUNTU-CVE-2026-32710","openSUSE-SU-2026:10694-1","openSUSE-SU-2026:20629-1"],"status":"published","title":"Heap-based Buffer Overflow in MariaDB","description":"MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0089,"percentile":0.59807,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-122"],"published":"2026-03-20T18:31:48Z","modified":"2026-11-04T20:03:04Z","exploits":[{"source":"pocgithub","id":"dinosn/CVE-2026-32710","title":"dinosn/CVE-2026-32710","date":"2026-05-06","url":"https://github.com/dinosn/CVE-2026-32710"}],"fixes":[{"ecosystem":"Alpaquita:25","package":"mariadb","fixed_in":["11.4.10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"mariadb","fixed_in":["11.8.6-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mariadb","fixed_in":["11.4.10","11.8.6","12.2.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mariadb-min","fixed_in":["11.4.10","11.8.6","12.2.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"mysql-client","fixed_in":["11.4.10","11.8.6","12.2.2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mariadb","fixed_in":["1:11.8.6-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mariadb","fixed_in":["1:11.8.6-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"galera","fixed_in":["0:26.4.25-1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"galera-debuginfo","fixed_in":["0:26.4.25-1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"galera-debugsource","fixed_in":["0:26.4.25-1.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-backup","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-backup-debuginfo","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-client-utils","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-common","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-debuginfo","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-debugsource","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-devel","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-embedded","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-embedded-debuginfo","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-embedded-devel","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-errmsg","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-gssapi-server","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-gssapi-server-debuginfo","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-oqgraph-engine","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-oqgraph-engine-debuginfo","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-pam","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-pam-debuginfo","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-debuginfo","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-galera","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-galera-debuginfo","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-utils","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-test","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-test-debuginfo","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"galera","fixed_in":["0:26.4.25-1.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"galera-debuginfo","fixed_in":["0:26.4.25-1.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"galera-debugsource","fixed_in":["0:26.4.25-1.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-backup","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-backup-debuginfo","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-client-utils","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-common","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-debuginfo","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-debugsource","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-devel","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-embedded","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-embedded-debuginfo","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-embedded-devel","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-errmsg","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-gssapi-server","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-gssapi-server-debuginfo","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-oqgraph-engine","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-oqgraph-engine-debuginfo","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-pam","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-pam-debuginfo","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-debuginfo","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-galera","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-galera-debuginfo","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-utils","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-test","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-test-debuginfo","fixed_in":["3:11.8.6-2.module+el9.8.0+24146+e179c349"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"galera","fixed_in":["0:26.4.25-1.el10_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"mariadb11.8","fixed_in":["3:11.8.6-2.el10_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"galera","fixed_in":["0:26.4.25-1.module+el9.8.0+40192+484cc2de"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"mariadb","fixed_in":["3:11.8.6-2.module+el9.8.0+40192+484cc2de"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"mariadb","fixed_in":["11.8.6-150700.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"mariadb","fixed_in":["11.8.6-150700.3.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"mariadb","fixed_in":["11.8.6-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:25","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.4.5-r0"},{"fixed":"11.4.10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.4.2-r0"},{"fixed":"11.8.6-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mariadb","ranges":[{"type":"SEMVER","events":[{"introduced":"11.4.1"},{"fixed":"11.4.10"},{"introduced":"11.8.1"},{"fixed":"11.8.6"},{"introduced":"12.1.2"},{"fixed":"12.2.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mariadb-min","ranges":[{"type":"SEMVER","events":[{"introduced":"11.4.1"},{"fixed":"11.4.10"},{"introduced":"11.8.1"},{"fixed":"11.8.6"},{"introduced":"12.1.2"},{"fixed":"12.2.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mysql-client","ranges":[{"type":"SEMVER","events":[{"introduced":"11.4.1"},{"fixed":"11.4.10"},{"introduced":"11.8.1"},{"fixed":"11.8.6"},{"introduced":"12.1.2"},{"fixed":"12.2.2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.6-0+deb13u1"}]}],"versions":["1:11.8.2-1","1:11.8.3-0+deb13u1","1:11.8.3-1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-3~exp1","1:11.8.5-3~exp2","1:11.8.5-3~exp3","1:11.8.5-4"]},{"source":"osv","ecosystem":"Debian:14","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.8.6-1"}]}],"versions":["1:11.8.2-1","1:11.8.3-1","1:11.8.5-1","1:11.8.5-2","1:11.8.5-3","1:11.8.5-3~exp1","1:11.8.5-3~exp2","1:11.8.5-3~exp3","1:11.8.5-4"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.25-1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"galera-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.25-1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"galera-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.25-1.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-backup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-client-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-gssapi-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-gssapi-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-oqgraph-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-oqgraph-engine-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-galera-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-server-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"mariadb11.8-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.25-1.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"galera-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.25-1.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"galera-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.25-1.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-backup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-client-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-embedded-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-gssapi-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-gssapi-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-oqgraph-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-oqgraph-engine-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-galera-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-server-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mariadb-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+24146+e179c349"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.25-1.el10_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"mariadb11.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.el10_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"galera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.4.25-1.module+el9.8.0+40192+484cc2de"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:11.8.6-2.module+el9.8.0+40192+484cc2de"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.6-150700.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.6-150700.3.12.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.11.4-1","1:10.11.5-3","1:10.11.6-1","1:10.11.6-2","1:10.11.7-2ubuntu1","1:10.11.7-2ubuntu2","1:10.11.8-0ubuntu0.24.04.1","1:10.11.11-0ubuntu0.24.04.2","1:10.11.13-0ubuntu0.24.04.1","1:10.11.14-0ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:11.4.5-1","1:11.8.1-4","1:11.8.1-5ubuntu2","1:11.8.2-1ubuntu1","1:11.8.3-1","1:11.8.3-1build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mariadb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.8.6-1.1"}]}]}],"products":[{"vendor":"devolutions","product":"server"},{"vendor":"mariadb","product":"mariadb"},{"vendor":"mariadb","product":"server"}],"references":[{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-4rj5-2227-9wgc","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","article","report"]},{"url":"https://jira.mariadb.org/browse/MDEV-38356","tags":["x_refsource_MISC","Issue Tracking","Vendor Advisory","advisory","web","article"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-32710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32710","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32710.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-32710","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19021","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449711","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19021.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32710","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19182","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19182.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19021","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19182","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261367-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1260081","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32710","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621407-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-32710","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-32710","title":"Heap-based Buffer Overflow in MariaDB","description":"MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.","status":"published","published":"2026-03-20T18:31:48.87Z","modified":"2026-03-27T03:55:38.121Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:19:57.47301Z"}],"euvd":[{"id":"EUVD-2026-13764","description":"MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.","status":"published","published":"2026-03-20T18:31:48Z","modified":"2026-03-27T03:55:38Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:27.67679Z"}],"nvd":[{"id":"CVE-2026-32710","description":"MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.","status":"published","published":"2026-03-20T19:16:16.67Z","modified":"2026-06-17T10:36:15.013Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:12:10.126802Z"}],"osv":[{"id":"BELL-CVE-2026-32710","status":"published","published":"2026-03-24T06:08:52.688993Z","modified":"2026-04-03T07:16:07.307029Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:23.572955Z"},{"id":"CVE-2026-32710","title":"Heap-based Buffer Overflow in MariaDB","description":"MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.","status":"published","published":"2026-03-20T18:31:48.87Z","modified":"2026-10-28T02:30:24.294683348Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:45:01.548715Z"},{"id":"DEBIAN-CVE-2026-32710","description":"MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.","status":"published","published":"2026-03-20T19:16:16.67Z","modified":"2026-10-01T03:03:03.357729628Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:54.232518Z"},{"id":"RHSA-2026:19021","title":"Red Hat Security Advisory: galera and mariadb11.8 security update","status":"published","published":"2026-05-20T10:09:37Z","modified":"2026-07-05T10:04:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19182","title":"Red Hat Security Advisory: mariadb:11.8 security update","status":"published","published":"2026-05-20T10:10:14Z","modified":"2026-07-05T10:04:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RLSA-2026:19021","title":"Moderate: galera and mariadb11.8 security update","description":"MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.\n\nSecurity Fix(es):\n\n* MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function vulnerability (CVE-2026-32710)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:23.746596651Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19182","title":"Moderate: mariadb:11.8 security update","description":"MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. \n\nSecurity Fix(es):\n\n* MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function vulnerability (CVE-2026-32710)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-28T15:43:06.024531Z","modified":"2026-05-28T16:00:26.874705638Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-32710","description":"MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.","status":"published","published":"2026-03-20T19:16:00Z","modified":"2026-11-04T20:03:04.87338357Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-04T21:44:40.383812Z"},{"id":"BIT-mariadb-2026-32710","title":"Heap-based Buffer Overflow in MariaDB","description":"MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.","status":"published","published":"2026-03-25T08:46:04.911Z","modified":"2026-09-08T08:48:24.165007026Z","updated_at":"2026-11-02T15:28:32.645004Z"},{"id":"BIT-mariadb-min-2026-32710","title":"Heap-based Buffer Overflow in MariaDB","description":"MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.","status":"published","published":"2026-03-25T08:46:23.287Z","modified":"2026-09-08T08:48:12.71425528Z","updated_at":"2026-11-02T15:28:32.645004Z"},{"id":"BIT-mysql-client-2026-32710","title":"Heap-based Buffer Overflow in MariaDB","description":"MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.","status":"published","published":"2026-03-25T08:49:03.929Z","modified":"2026-09-08T08:47:36.003374459Z","updated_at":"2026-11-02T15:28:33.469426Z"},{"id":"openSUSE-SU-2026:10694-1","title":"libmariadbd-devel-11.8.6-1.1 on GA media","description":"These are all security issues fixed in the libmariadbd-devel-11.8.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-05T00:00:00Z","modified":"2026-05-06T08:01:09.198084Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20629-1","title":"Security update for mariadb","description":"This update for mariadb fixes the following issue:\n\n- Update to v11.8.6\n- CVE-2026-32710: heap-based buffer overflow via `JSON_SCHEMA_VALID()` can lead to crash or remote code execution (bsc#1260081).\n","status":"published","published":"2026-04-27T14:44:48Z","modified":"2026-04-29T08:02:28.279747Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:1367-1","title":"Security update for mariadb","description":"This update for mariadb fixes the following issues:\n\nUpdate to version 11.8.6.\n\n- https://mariadb.com/docs/release-notes/community-server/11.8/11.8.6\n- https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.6\n\nSecurity issues fixed:\n\n- CVE-2026-32710: heap-based buffer overflow via `JSON_SCHEMA_VALID()` can lead to crash or remote code execution\n  (bsc#1260081).\n","status":"published","published":"2026-04-15T14:34:10Z","modified":"2026-04-16T08:31:51.116116Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:21407-1","title":"Security update for mariadb","description":"This update for mariadb fixes the following issue:\n\n- Update to v11.8.6\n- CVE-2026-32710: heap-based buffer overflow via `JSON_SCHEMA_VALID()` can lead to crash or remote code execution (bsc#1260081).\n","status":"published","published":"2026-04-27T14:02:32Z","modified":"2026-05-01T18:27:00.214664Z","updated_at":"2026-11-02T15:54:02.312556Z"}]}}