critical
CVE-2026-32710
MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function vulnerability
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Red Hat7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Bitnami10.0CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Bitnami. Rated lower by Red Hat (medium), Oracle (medium), Rocky Linux (medium).
Description
MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | mariadb, mariadb-min, mysql-client | 11.4.10, 11.8.6, 12.2.2 |
| chainguard | mariadb-11.8 | 11.8.9-r1 |
| debian 13 | mariadb | 1:11.8.6-0+deb13u1 |
| debian 14 | mariadb | 1:11.8.6-1 |
| minimos | mariadb-11.4, mariadb-11.8 | 11.4.10-r0 and 1 more |
| Oracle Linux 9 | galera, mariadb, mariadb-backup and 13 more | 26.4.25-1.0.1.module+el9.8.0+90895+7148d2d3 and 1 more |
| rapidfort alma 9 | mariadb, mariadb-backup, mariadb-common and 8 more | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 and 1 more |
| rapidfort alpine 3.20 | mariadb | 11.4.10-r0 |
| rapidfort alpine 3.21 | mariadb | 11.4.10-r0 |
| rapidfort alpine 3.22 | mariadb | 11.4.10-r0 |
| rapidfort alpine 3.23 | mariadb | 11.4.10-r0 |
| rapidfort alpine 3.24 | mariadb | 11.4.10-r0 |
Show all 111 entries from 25 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | mariadb | 11.4.10, 11.8.6, 12.2.2 |
| bitnami::Bitnami Vulnerability Database | mariadb-min | 11.4.10, 11.8.6, 12.2.2 |
| bitnami::Bitnami Vulnerability Database | mysql-client | 11.4.10, 11.8.6, 12.2.2 |
| chainguard | mariadb-11.8 | 11.8.9-r1 |
| debian 13 | mariadb | 1:11.8.6-0+deb13u1 |
| debian 14 | mariadb | 1:11.8.6-1 |
| minimos | mariadb-11.4 | 11.4.10-r0 |
| minimos | mariadb-11.8 | 11.8.6-r0 |
| Oracle Linux 9 | galera | 26.4.25-1.0.1.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-backup | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-client-utils | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-common | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-devel | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-embedded | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-embedded-devel | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-errmsg | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-gssapi-server | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-oqgraph-engine | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-pam | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-server | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-server-galera | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-server-utils | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| Oracle Linux 9 | mariadb-test | 3:11.8.6-2.module+el9.8.0+90895+7148d2d3 |
| rapidfort alma 9 | mariadb | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort alma 9 | mariadb-backup | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort alma 9 | mariadb-common | 3:11.8.6-2.module+el9.8.0+24146+e179c349.noarch::mariadb:11 |
| rapidfort alma 9 | mariadb-embedded | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort alma 9 | mariadb-errmsg | 3:11.8.6-2.module+el9.8.0+24146+e179c349.noarch::mariadb:11 |
| rapidfort alma 9 | mariadb-gssapi-server | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort alma 9 | mariadb-oqgraph-engine | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort alma 9 | mariadb-pam | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort alma 9 | mariadb-server | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort alma 9 | mariadb-server-galera | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort alma 9 | mariadb-server-utils | 3:11.8.6-2.module+el9.8.0+24146+e179c349.noarch::mariadb:11 |
| rapidfort alpine 3.20 | mariadb | 11.4.10-r0 |
| rapidfort alpine 3.21 | mariadb | 11.4.10-r0 |
| rapidfort alpine 3.22 | mariadb | 11.4.10-r0 |
| rapidfort alpine 3.23 | mariadb | 11.4.10-r0 |
| rapidfort alpine 3.24 | mariadb | 11.4.10-r0 |
| rapidfort debian 12 | mariadb | 1:11.8.6-0+deb13u1, 1:11.8.6-1 |
| rapidfort debian 12 | rf-mariadb | 1:11.4.10, 1:11.8.6-0+deb13u1, 1:11.8.6-1 |
| rapidfort debian 13 | mariadb | 1:11.8.6-0+deb13u1, 1:11.8.6-1 |
| rapidfort debian 13 | rf-mariadb | 1:11.4.10, 1:11.8.6-0+deb13u1, 1:11.8.6-1 |
| rapidfort Oracle Linux 10 | galera | 0:26.4.25-1.el10_2 |
| rapidfort Oracle Linux 9 | galera | 26.4.9-2.0.2.el9 |
| rapidfort Oracle Linux 9 | mariadb | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort Oracle Linux 9 | mariadb-backup | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort Oracle Linux 9 | mariadb-common | 3:11.8.6-2.module+el9.8.0+24146+e179c349.noarch::mariadb:11 |
| rapidfort Oracle Linux 9 | mariadb-embedded | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort Oracle Linux 9 | mariadb-errmsg | 3:11.8.6-2.module+el9.8.0+24146+e179c349.noarch::mariadb:11 |
| rapidfort Oracle Linux 9 | mariadb-gssapi-server | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort Oracle Linux 9 | mariadb-oqgraph-engine | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort Oracle Linux 9 | mariadb-pam | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort Oracle Linux 9 | mariadb-server | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort Oracle Linux 9 | mariadb-server-galera | 3:11.8.6-2.module+el9.8.0+24146+e179c349.aarch64::mariadb:11 |
| rapidfort Oracle Linux 9 | mariadb-server-utils | 3:11.8.6-2.module+el9.8.0+24146+e179c349.noarch::mariadb:11 |
| rapidfort Red Hat 9 | mariadb | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| rapidfort Red Hat 9 | mariadb-common | 3:11.8.6-2.module+el9.8.0+24146+e179c349 |
| rapidfort rocky 9 | galera | 0:26.4.25-1.module+el9.8.0+40192+484cc2de |
| rapidfort rocky 9 | mariadb | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rapidfort rocky 9 | mariadb-backup | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rapidfort rocky 9 | mariadb-common | 3:11.8.6-2.module+el9.8.0+24146+e179c349.noarch::mariadb:11 |
| rapidfort rocky 9 | mariadb-embedded | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rapidfort rocky 9 | mariadb-errmsg | 3:11.8.6-2.module+el9.8.0+24146+e179c349.noarch::mariadb:11 |
| rapidfort rocky 9 | mariadb-gssapi-server | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rapidfort rocky 9 | mariadb-oqgraph-engine | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rapidfort rocky 9 | mariadb-pam | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rapidfort rocky 9 | mariadb-server | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rapidfort rocky 9 | mariadb-server-galera | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rapidfort rocky 9 | mariadb-server-utils | 3:11.8.6-2.module+el9.8.0+24146+e179c349.noarch::mariadb:11 |
| rapidfort ubuntu 20.04 | mariadb | 1:11.8.6-1 |
| rapidfort ubuntu 20.04 | rf-mariadb | 1:11.8.6-1 |
| rapidfort ubuntu 22.04 | mariadb | 1:11.8.6-1 |
| rapidfort ubuntu 22.04 | rf-mariadb | 1:11.8.6-1 |
| rapidfort ubuntu 24.04 | mariadb | 1:11.8.6-1 |
| rapidfort ubuntu 24.04 | rf-mariadb | 1:11.8.6-1 |
| rocky 10 | galera | 26.4.25-1.el10_2 |
| rocky 10 | mariadb11.8 | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-backup | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-client-utils | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-common | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-devel | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-embedded | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-embedded-devel | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-errmsg | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-gssapi-server | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-oqgraph-engine | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-pam | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-server | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-server-galera | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-server-utils | 3:11.8.6-2.el10_2 |
| rocky 10 | mariadb11.8-test | 3:11.8.6-2.el10_2 |
| rocky 9 | mariadb:11.8::galera | 26.4.25-1.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-backup | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-client-utils | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-common | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-devel | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-embedded | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-embedded-devel | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-errmsg | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-gssapi-server | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-oqgraph-engine | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-pam | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-server | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-server-galera | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-server-utils | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| rocky 9 | mariadb:11.8::mariadb-test | 3:11.8.6-2.module+el9.8.0+40192+484cc2de |
| root.io debian 13 | rootio-mariadb | 1:11.8.6-0+deb13u1 |
| wolfi | mariadb-11.8 | 11.8.9-r1 |
References
- https://access.redhat.com/errata/RHSA-2026:19182
- https://access.redhat.com/security/cve/CVE-2026-32710
- https://bugzilla.redhat.com/show_bug.cgi?id=2449711
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32710
- https://errata.rockylinux.org/RLSA-2026:19182
- https://github.com/MariaDB/server/security/advisories/GHSA-4rj5-2227-9wgc
- https://jira.mariadb.org/browse/MDEV-38356