Approved changes feed: RSS · Atom

cpe:2.3:a:mariadb:mariadb:12.1.2:*:*:*:*:*:*:*

part: a version: 12.1.2 update: *

VendorMariadb (7f603b14-ed39-5458-877b-2a349be64aa8)
ProductMariadb (f53ad24a-fa82-58e9-8aea-d11d98960d9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mariadb-server purl2cpe 2026-07-28 16:41:11.943431
pkg:deb/ubuntu/mariadb-server purl2cpe 2026-07-28 16:41:11.943433
pkg:docker/mariadb/mariadb-docker purl2cpe 2026-07-28 16:41:11.943434
pkg:docker/mariadb/server purl2cpe 2026-07-28 16:41:11.943435
pkg:github/mariadb/server purl2cpe 2026-07-28 16:41:11.943437
pkg:rpm/fedora/mariadb purl2cpe 2026-07-28 16:41:11.943438
pkg:rpm/opensuse/mariadb purl2cpe 2026-07-28 16:41:11.943439

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-32710 vulnerable 2026-06-08 07:57:18.066044 Heap-based Buffer Overflow in MariaDB
HIGH (8.6)
MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.
Published: 2026-03-20T18:31:48.870Z
Updated: 2026-03-27T03:55:38.121Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.