The vulnerability is an out‑of‑bounds write in the ST_AsText function of MariaDB server caused by recursive serialization of deeply nested GeometryCollections. The function fails to account for bytes already consumed and does not reserve sufficient buffer space, leading to a buffer overflow. An attacker who can submit malicious GIS data to the database can corrupt memory, potentially gaining arbitrary code execution when combined with another vulnerability. This flaw threatens confidentiality, integrity, and availability by allowing memory corruption via a simple database query.

MariaDB server is affected. Versions 10.6.1 through 10.6.28, 10.11.1 through 10.11.19, 11.4.1 through 11.4.13, 11.8.1 through 11.8.9, 12.3.1 through 12.3.3, and 13.0.1 through 13.0.2 all contain the flaw. Versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2 include the fix.

The CVSS score of 9.9 indicates a critical severity, and the lack of an EPSS entry means the current exploitation probability is unknown but the flaw remains high risk. The vulnerability is not listed in the CISA KEV catalog. An attacker can exploit the flaw remotely by sending crafted GIS data over a network interface, requiring only low privileges. Because the overflow can lead to arbitrary code execution when combined with another exploit, the risk is severe for exposed database servers. Immediate remediation is essential to prevent potential compromise.