Heap-based buffer overflow in MariaDB - CVE-2026-32710

Vulnerability identifier: #VU128347

CSH Severity: Medium

CVSS v4: 7.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-32710

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to execute arbitrary code.

The vulnerability exists due to heap-based buffer overflow in the JSON_SCHEMA_VALID() function when processing crafted input. A remote user can send specially crafted input to execute arbitrary code.

Successful code execution requires tight control over memory layout and is generally only attainable in a lab environment.

MariaDB
mariadb-debugsource
mariadb-debuginfo
mariadb-galera
libmariadbd-devel
mariadb-client
mariadb
libmariadbd19
mariadb-client-debuginfo
mariadb-tools
mariadb-tools-debuginfo
libmariadbd19-debuginfo
mariadb-errormessages
Galera for Ericsson 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Server Applications Module
SUSE Package Hub 15

Install security update from vendor's website.

MariaDB - addressed in versions 11.4.10, 11.8.6, 12.2.2
mariadb-debugsource - update to 11.8.6-150700.3.12.1
mariadb-debuginfo - update to 11.8.6-150700.3.12.1
mariadb-galera - update to 11.8.6-150700.3.12.1
libmariadbd-devel - update to 11.8.6-150700.3.12.1
mariadb-client - update to 11.8.6-150700.3.12.1
mariadb - update to 11.8.6-150700.3.12.1
libmariadbd19 - update to 11.8.6-150700.3.12.1
mariadb-client-debuginfo - update to 11.8.6-150700.3.12.1
mariadb-tools - update to 11.8.6-150700.3.12.1
mariadb-tools-debuginfo - update to 11.8.6-150700.3.12.1
libmariadbd19-debuginfo - update to 11.8.6-150700.3.12.1
mariadb-errormessages - update to 11.8.6-150700.3.12.1

• https://github.com/MariaDB/server/security/advisories/GHSA-4rj5-2227-9wgc
• https://jira.mariadb.org/browse/MDEV-38356

• Heap-based buffer overflow in MariaDB
• SUSE update for mariadb