high
CVE-2026-85746
MariaDB server is a community developed fork of MySQL server. From 10. ...
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
Bitnami10.0CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Trivy's own label is HIGH. Rated critical by Bitnami.
Description
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for bytes consumed or reserve sufficient space. A low-privileged remote attacker can submit a specially crafted GIS object to corrupt memory and potentially achieve code execution when combined with another vulnerability. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | mariadb, mariadb-min, mysql-client | 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2 |
| debian 12 | mariadb | no fix listed |
| debian 13 | mariadb | no fix listed |
| debian 14 | mariadb | 1:11.8.9+ds-1 |
| echo | mariadb | 1:11.8.9+ds-2 |
| rapidfort alma 10 | mariadb, mariadb-backup, mariadb-client-utils and 27 more | no fix listed |
| rapidfort alma 9 | mariadb, mariadb-backup, mariadb-common and 11 more | no fix listed |
| rapidfort alpine 3.20 | mariadb | 11.4.10-r0, 11.4.13-r0, 11.4.5-r0, 11.4.8-r0, 11.8.9-r0 |
| rapidfort alpine 3.21 | mariadb | 11.4.10-r0, 11.4.13-r0, 11.4.8-r0, 11.8.9-r0 |
| rapidfort alpine 3.22 | mariadb | 11.4.10-r0, 11.4.13-r0, 11.4.8-r0, 11.8.9-r0 |
| rapidfort alpine 3.23 | mariadb | 11.4.10-r0, 11.4.13-r0, 11.4.8-r0, 11.8.9-r0 |
| rapidfort alpine 3.24 | mariadb | 11.4.10-r0, 11.4.13-r0, 11.8.9-r0 |
Show all 206 entries from 26 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | mariadb | 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2 |
| bitnami::Bitnami Vulnerability Database | mariadb-min | 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2 |
| bitnami::Bitnami Vulnerability Database | mysql-client | 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2 |
| debian 12 | mariadb | no fix listed |
| debian 13 | mariadb | no fix listed |
| debian 14 | mariadb | 1:11.8.9+ds-1 |
| echo | mariadb | 1:11.8.9+ds-2 |
| rapidfort alma 10 | mariadb | no fix listed |
| rapidfort alma 10 | mariadb-backup | no fix listed |
| rapidfort alma 10 | mariadb-client-utils | no fix listed |
| rapidfort alma 10 | mariadb-common | no fix listed |
| rapidfort alma 10 | mariadb-devel | no fix listed |
| rapidfort alma 10 | mariadb-embedded | no fix listed |
| rapidfort alma 10 | mariadb-embedded-devel | no fix listed |
| rapidfort alma 10 | mariadb-errmsg | no fix listed |
| rapidfort alma 10 | mariadb-gssapi-server | no fix listed |
| rapidfort alma 10 | mariadb-oqgraph-engine | no fix listed |
| rapidfort alma 10 | mariadb-pam | no fix listed |
| rapidfort alma 10 | mariadb-server | no fix listed |
| rapidfort alma 10 | mariadb-server-galera | no fix listed |
| rapidfort alma 10 | mariadb-server-utils | no fix listed |
| rapidfort alma 10 | mariadb-test | no fix listed |
| rapidfort alma 10 | mariadb11.8 | no fix listed |
| rapidfort alma 10 | mariadb11.8-backup | no fix listed |
| rapidfort alma 10 | mariadb11.8-client-utils | no fix listed |
| rapidfort alma 10 | mariadb11.8-common | no fix listed |
| rapidfort alma 10 | mariadb11.8-devel | no fix listed |
| rapidfort alma 10 | mariadb11.8-embedded | no fix listed |
| rapidfort alma 10 | mariadb11.8-embedded-devel | no fix listed |
| rapidfort alma 10 | mariadb11.8-errmsg | no fix listed |
| rapidfort alma 10 | mariadb11.8-gssapi-server | no fix listed |
| rapidfort alma 10 | mariadb11.8-oqgraph-engine | no fix listed |
| rapidfort alma 10 | mariadb11.8-pam | no fix listed |
| rapidfort alma 10 | mariadb11.8-server | no fix listed |
| rapidfort alma 10 | mariadb11.8-server-galera | no fix listed |
| rapidfort alma 10 | mariadb11.8-server-utils | no fix listed |
| rapidfort alma 10 | mariadb11.8-test | no fix listed |
| rapidfort alma 9 | mariadb | no fix listed |
| rapidfort alma 9 | mariadb-backup | no fix listed |
| rapidfort alma 9 | mariadb-common | no fix listed |
| rapidfort alma 9 | mariadb-devel | no fix listed |
| rapidfort alma 9 | mariadb-embedded | no fix listed |
| rapidfort alma 9 | mariadb-embedded-devel | no fix listed |
| rapidfort alma 9 | mariadb-errmsg | no fix listed |
| rapidfort alma 9 | mariadb-gssapi-server | no fix listed |
| rapidfort alma 9 | mariadb-oqgraph-engine | no fix listed |
| rapidfort alma 9 | mariadb-pam | no fix listed |
| rapidfort alma 9 | mariadb-server | no fix listed |
| rapidfort alma 9 | mariadb-server-galera | no fix listed |
| rapidfort alma 9 | mariadb-server-utils | no fix listed |
| rapidfort alma 9 | mariadb-test | no fix listed |
| rapidfort alpine 3.20 | mariadb | 11.4.10-r0, 11.4.13-r0, 11.4.5-r0, 11.4.8-r0, 11.8.9-r0 |
| rapidfort alpine 3.21 | mariadb | 11.4.10-r0, 11.4.13-r0, 11.4.8-r0, 11.8.9-r0 |
| rapidfort alpine 3.22 | mariadb | 11.4.10-r0, 11.4.13-r0, 11.4.8-r0, 11.8.9-r0 |
| rapidfort alpine 3.23 | mariadb | 11.4.10-r0, 11.4.13-r0, 11.4.8-r0, 11.8.9-r0 |
| rapidfort alpine 3.24 | mariadb | 11.4.10-r0, 11.4.13-r0, 11.8.9-r0 |
| rapidfort amazon linux 2023 | mariadb1011 | no fix listed |
| rapidfort amazon linux 2023 | mariadb105 | no fix listed |
| rapidfort amazon linux 2023 | mariadb114 | no fix listed |
| rapidfort amazon linux 2023 | mariadb118 | no fix listed |
| rapidfort amazon linux 2023 | mariadb123 | no fix listed |
| rapidfort debian 12 | mariadb | 1:11.8.9+ds-1 |
| rapidfort debian 12 | rf-mariadb | 1:10.11.19, 1:11.4.13, 1:11.8.9+ds-1 |
| rapidfort debian 13 | mariadb | 1:11.8.9+ds-1 |
| rapidfort debian 13 | rf-mariadb | 1:10.11.19, 1:11.4.13, 1:11.8.9+ds-1 |
| rapidfort fedora 43 | mariadb | 3:10.11.18-3.fc43 |
| rapidfort Oracle Linux 10 | mariadb | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-backup | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-client-utils | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-common | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-devel | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-embedded | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-embedded-devel | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-errmsg | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-gssapi-server | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-oqgraph-engine | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-pam | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-server | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-server-galera | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-server-utils | no fix listed |
| rapidfort Oracle Linux 10 | mariadb-test | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8 | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-backup | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-client-utils | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-common | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-devel | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-embedded | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-embedded-devel | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-errmsg | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-gssapi-server | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-oqgraph-engine | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-pam | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-server | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-server-galera | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-server-utils | no fix listed |
| rapidfort Oracle Linux 10 | mariadb11.8-test | no fix listed |
| rapidfort Oracle Linux 9 | mariadb | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-backup | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-common | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-devel | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-embedded | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-embedded-devel | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-errmsg | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-gssapi-server | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-oqgraph-engine | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-pam | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-server | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-server-galera | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-server-utils | no fix listed |
| rapidfort Oracle Linux 9 | mariadb-test | no fix listed |
| rapidfort Red Hat 10 | mariadb | no fix listed |
| rapidfort Red Hat 10 | mariadb-common | no fix listed |
| rapidfort Red Hat 9 | mariadb | no fix listed |
| rapidfort Red Hat 9 | mariadb-common | no fix listed |
| rapidfort rocky 10 | mariadb | no fix listed |
| rapidfort rocky 10 | mariadb-backup | no fix listed |
| rapidfort rocky 10 | mariadb-common | no fix listed |
| rapidfort rocky 10 | mariadb-embedded | no fix listed |
| rapidfort rocky 10 | mariadb-errmsg | no fix listed |
| rapidfort rocky 10 | mariadb-gssapi-server | no fix listed |
| rapidfort rocky 10 | mariadb-oqgraph-engine | no fix listed |
| rapidfort rocky 10 | mariadb-pam | no fix listed |
| rapidfort rocky 10 | mariadb-server | no fix listed |
| rapidfort rocky 10 | mariadb-server-galera | no fix listed |
| rapidfort rocky 10 | mariadb-server-utils | no fix listed |
| rapidfort rocky 9 | mariadb | no fix listed |
| rapidfort rocky 9 | mariadb-backup | no fix listed |
| rapidfort rocky 9 | mariadb-common | no fix listed |
| rapidfort rocky 9 | mariadb-embedded | no fix listed |
| rapidfort rocky 9 | mariadb-errmsg | no fix listed |
| rapidfort rocky 9 | mariadb-gssapi-server | no fix listed |
| rapidfort rocky 9 | mariadb-oqgraph-engine | no fix listed |
| rapidfort rocky 9 | mariadb-pam | no fix listed |
| rapidfort rocky 9 | mariadb-server | no fix listed |
| rapidfort rocky 9 | mariadb-server-galera | no fix listed |
| rapidfort rocky 9 | mariadb-server-utils | no fix listed |
| rapidfort ubuntu 20.04 | mariadb | 1:10.11.14+maria~ubu2404, 1:11.8.8+maria~ubu2404 |
| rapidfort ubuntu 20.04 | rf-mariadb | 1:10.11.14+maria~ubu2404, 1:11.8.8+maria~ubu2404, 1:11.8.9+ds-2 |
| rapidfort ubuntu 22.04 | mariadb | 1:10.11.14+maria~ubu2404, 1:11.8.8+maria~ubu2404 |
| rapidfort ubuntu 22.04 | rf-mariadb | 1:10.11.14+maria~ubu2404, 1:11.8.8+maria~ubu2404, 1:11.8.9+ds-2 |
| rapidfort ubuntu 24.04 | mariadb | 1:10.11.14+maria~ubu2404, 1:11.8.8+maria~ubu2404 |
| rapidfort ubuntu 24.04 | rf-mariadb | 1:10.11.14+maria~ubu2404, 1:11.8.8+maria~ubu2404, 1:11.8.9+ds-2 |
| Red Hat | mariadb | no fix listed |
| Red Hat | mariadb-backup | no fix listed |
| Red Hat | mariadb-bench | no fix listed |
| Red Hat | mariadb-common | no fix listed |
| Red Hat | mariadb-config | no fix listed |
| Red Hat | mariadb-connect-engine | no fix listed |
| Red Hat | mariadb-devel | no fix listed |
| Red Hat | mariadb-embedded | no fix listed |
| Red Hat | mariadb-embedded-devel | no fix listed |
| Red Hat | mariadb-errmsg | no fix listed |
| Red Hat | mariadb-gssapi-server | no fix listed |
| Red Hat | mariadb-libs | no fix listed |
| Red Hat | mariadb-oqgraph-engine | no fix listed |
| Red Hat | mariadb-pam | no fix listed |
| Red Hat | mariadb-server | no fix listed |
| Red Hat | mariadb-server-galera | no fix listed |
| Red Hat | mariadb-server-utils | no fix listed |
| Red Hat | mariadb-test | no fix listed |
| Red Hat | mariadb:10.11::Judy | no fix listed |
| Red Hat | mariadb:10.11::galera | no fix listed |
| Red Hat | mariadb:10.11::mariadb | no fix listed |
| Red Hat | mariadb:10.11::mariadb-backup | no fix listed |
| Red Hat | mariadb:10.11::mariadb-common | no fix listed |
| Red Hat | mariadb:10.11::mariadb-devel | no fix listed |
| Red Hat | mariadb:10.11::mariadb-embedded | no fix listed |
| Red Hat | mariadb:10.11::mariadb-embedded-devel | no fix listed |
| Red Hat | mariadb:10.11::mariadb-errmsg | no fix listed |
| Red Hat | mariadb:10.11::mariadb-gssapi-server | no fix listed |
| Red Hat | mariadb:10.11::mariadb-oqgraph-engine | no fix listed |
| Red Hat | mariadb:10.11::mariadb-pam | no fix listed |
| Red Hat | mariadb:10.11::mariadb-server | no fix listed |
| Red Hat | mariadb:10.11::mariadb-server-galera | no fix listed |
| Red Hat | mariadb:10.11::mariadb-server-utils | no fix listed |
| Red Hat | mariadb:10.11::mariadb-test | no fix listed |
| Red Hat | mariadb:10.3::Judy | no fix listed |
| Red Hat | mariadb:10.3::galera | no fix listed |
| Red Hat | mariadb:10.3::mariadb | no fix listed |
| Red Hat | mariadb:10.3::mariadb-backup | no fix listed |
| Red Hat | mariadb:10.3::mariadb-common | no fix listed |
| Red Hat | mariadb:10.3::mariadb-devel | no fix listed |
| Red Hat | mariadb:10.3::mariadb-embedded | no fix listed |
| Red Hat | mariadb:10.3::mariadb-embedded-devel | no fix listed |
| Red Hat | mariadb:10.3::mariadb-errmsg | no fix listed |
| Red Hat | mariadb:10.3::mariadb-gssapi-server | no fix listed |
| Red Hat | mariadb:10.3::mariadb-oqgraph-engine | no fix listed |
| Red Hat | mariadb:10.3::mariadb-pam | no fix listed |
| Red Hat | mariadb:10.3::mariadb-server | no fix listed |
| Red Hat | mariadb:10.3::mariadb-server-galera | no fix listed |
| Red Hat | mariadb:10.3::mariadb-server-utils | no fix listed |
| Red Hat | mariadb:10.3::mariadb-test | no fix listed |
| Red Hat | mariadb:11.8::mariadb | no fix listed |
| Red Hat | mariadb:11.8::mariadb-backup | no fix listed |
| Red Hat | mariadb:11.8::mariadb-common | no fix listed |
| Red Hat | mariadb:11.8::mariadb-devel | no fix listed |
| Red Hat | mariadb:11.8::mariadb-embedded | no fix listed |
| Red Hat | mariadb:11.8::mariadb-embedded-devel | no fix listed |
| Red Hat | mariadb:11.8::mariadb-errmsg | no fix listed |
| Red Hat | mariadb:11.8::mariadb-gssapi-server | no fix listed |
| Red Hat | mariadb:11.8::mariadb-oqgraph-engine | no fix listed |
| Red Hat | mariadb:11.8::mariadb-pam | no fix listed |
| Red Hat | mariadb:11.8::mariadb-server | no fix listed |
| Red Hat | mariadb:11.8::mariadb-server-galera | no fix listed |
| Red Hat | mariadb:11.8::mariadb-server-utils | no fix listed |
| Red Hat | mariadb:11.8::mariadb-test | no fix listed |
References
- https://github.com/MariaDB/server/commit/5c04ca5524385356ff7cf84974a7d491974c1f85
- https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19
- https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28
- https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13
- https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9
- https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3
- https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2
- https://github.com/MariaDB/server/security/advisories/GHSA-8fvj-c57c-pggx