CVE-2026-107816

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-107816
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

6.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.1 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact LOW

Scope CHANGED

References
Link Resource
https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e Patch
https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19 Release Notes
https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28 Release Notes
https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13 Release Notes
https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9 Release Notes
https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3 Release Notes
https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2 Release Notes
https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6 Vendor Advisory
https://jira.mariadb.org/browse/MDEV-40670 Issue Tracking
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
History

14 Oct 2026, 14:12

Type Values Removed Values Added
CPE cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
First Time Mariadb
Mariadb mariadb
References () https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e - () https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e - Patch
References () https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19 - () https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19 - Release Notes
References () https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28 - () https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28 - Release Notes
References () https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13 - () https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13 - Release Notes
References () https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9 - () https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9 - Release Notes
References () https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3 - () https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3 - Release Notes
References () https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2 - () https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2 - Release Notes
References () https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6 - () https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6 - Vendor Advisory
References () https://jira.mariadb.org/browse/MDEV-40670 - () https://jira.mariadb.org/browse/MDEV-40670 - Issue Tracking

09 Oct 2026, 18:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-10-09 18:17

Updated : 2026-10-14 14:12

NVD link : CVE-2026-107816

Mitre link : CVE-2026-107816

CVE.ORG link : CVE-2026-107816

JSON object : View

Products Affected

mariadb

  • mariadb
CWE
CWE-125

Out-of-bounds Read