CVE-2026-107817 - Vulnerability Details

Description

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data could cause out-of-bounds reads, information disclosure, or a server crash. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Published: 2026-10-09

Score: 4.4 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The vulnerability occurs in the mysql_json plugin of MariaDB server, which incorrectly assumes that imported tables contain valid binary JSON data. A table with malformed JSON can trigger out‑of‑bounds read operations, causing sensitive data leakage or a server crash. The flaw is a classic out‑of‑bounds read (CWE‑125).

Affected Systems

Vulnerable versions include MariaDB server 10.6.1 through 10.6.27, 10.11.1 through 10.11.18, 11.4.1 through 11.4.12, 11.8.1 through 11.8.8, 12.3.1 through 12.3.2, and 13.0.1. All later releases are patched.

Risk and Exploitability

With a CVSS score of 4.4 the flaw is low–moderate in severity, and EPSS data is not available. It is not listed in the CISA KEV catalog, indicating no known widespread exploitation. The attack vector requires control over the data import process; an attacker who can introduce a malformed JSON table can trigger the OOB read or a crash, affecting the particular MariaDB instance that processes the data.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

MariaDB

server

affected

Version	Status	Constraints
`>= 10.6.1, < 10.6.28`	affected	—
`>= 10.11.1, < 10.11.19`	affected	—
`>= 11.4.1, < 11.4.13`	affected	—
`>= 11.8.1, < 11.8.9`	affected	—
`>= 12.3.1, < 12.3.3`	affected	—
`>= 13.0.1, < 13.0.2`	affected	—

Configuration 1 [-]

OR	cpe:2.3:a:mariadb:mariadb::::::::
	cpe:2.3:a:mariadb:mariadb::::::::
	cpe:2.3:a:mariadb:mariadb::::::::
	cpe:2.3:a:mariadb:mariadb::::::::
	cpe:2.3:a:mariadb:mariadb::::::::
	cpe:2.3:a:mariadb:mariadb::::::::

No data.

Vendor Product Confidence Versions

Mariadb

Server

100%

Version	Status	Scheme	Platform
`[10.6.1,10.6.28)`	affected	semver	—
`[10.11.1,10.11.19)`	affected	semver	—
`[11.4.1,11.4.13)`	affected	semver	—
`[11.8.1,11.8.9)`	affected	semver	—
`[12.3.1,12.3.3)`	affected	semver	—
`[13.0.1,13.0.2)`	affected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the latest MariaDB server release that includes the fix (10.6.28 or newer, 10.11.19 or newer, 11.4.13 or newer, 11.8.9 or newer, 12.3.3 or newer, 13.0.2 or newer).
If an immediate upgrade is not possible, disable the mysql_json plugin or limit its use to strictly validated binary JSON data only.
Ensure that any data imported into tables accessed by mysql_json has been sanitized and conforms to the expected binary JSON format; avoid importing from untrusted sources.

Generated by OpenCVE AI on October 9, 2026 at 19:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00151.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907
https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19
https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28
https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13
https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9
https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3
https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2
https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc
https://jira.mariadb.org/browse/MDEV-40678
https://nvd.nist.gov/vuln/detail/CVE-2026-107817
https://www.cve.org/CVERecord?id=CVE-2026-107817

History

Wed, 14 Oct 2026 14:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Mariadb mariadb
CPEs		cpe:2.3:a:mariadb:mariadb::::::::
Vendors & Products		Mariadb mariadb

Tue, 13 Oct 2026 18:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sat, 10 Oct 2026 00:30:00 +0000

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2026-107817 https://www.cve.org/CVERecord?id=CVE-2026-107817
Metrics	threat_severity `None`	threat_severity `Moderate`

Fri, 09 Oct 2026 18:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Mariadb Mariadb server
Vendors & Products		Mariadb Mariadb server

Fri, 09 Oct 2026 17:30:00 +0000

Type	Values Removed	Values Added
Description		MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data could cause out-of-bounds reads, information disclosure, or a server crash. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
Title		MariaDB: mysql_json plugin OOB reads
Weaknesses		CWE-125
References		https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907 https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19 https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28 https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13 https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9 https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3 https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2 https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc https://jira.mariadb.org/browse/MDEV-40678
Metrics		cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L'}`

Subscriptions

Mariadb Mariadb Server

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2026-10-09T17:22:19.290Z

Updated: 2026-10-13T17:04:02.004Z

Reserved: 2026-10-08T21:23:59.823Z

Link: CVE-2026-107817

Vulnrichment

Updated: 2026-10-13T17:03:53.717Z

NVD

Status : Analyzed

Published: 2026-10-09T18:17:03.220

Modified: 2026-10-14T14:12:48.963

Link: CVE-2026-107817

Redhat

Severity : Moderate

Publid Date: 2026-10-09T17:22:19Z

Links: CVE-2026-107817 - Bugzilla

OpenCVE Enrichment

Updated: 2026-10-09T19:30:11Z

Weaknesses

CWE-125
Out-of-bounds Read

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact Low

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object