9.9

CVE-2026-32710: mariadb Heap-based Buffer Overflow

CVSS: 9.9v3.1CriticalAnalyzed
AliasesSUSE-SU-2026:1367-1RHSA-2026:19021RHSA-2026:19182
Published 20-03-2026Last modified 27-03-2026
Open JSON

Vulnerability summary

CVE-2026-32710 is a critical (CVSS 9.9) Heap-based Buffer Overflow vulnerability in mariadb. EPSS estimates a 0.83% chance of exploitation in the next 30 days, higher than 56.9% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.9/10
010
Critical · v3.1 (NVD)
EPSS score
0.83%
0%100%
Low · -0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 20-03-2026
    PublishedVulnerability first disclosed.
  2. 27-03-2026
    Last modifiedVulnerability information updated.

Description

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

CVSS metrics

7 scores · 7 sources · 1 version

EPSS trend

Probability

0.83%

Chance of exploitation in the next 30 days

Percentile

57%

Versus all other CVEs

30-day change

-0.02 pp

From 0.86% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.83%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat53 products
  • galera< 0:26.4.25-1.el10_2 | < 0:26.4.25-1.module+el9.8.0+24146+e179c349
  • galera-debuginfo< 0:26.4.25-1.el10_2 | < 0:26.4.25-1.module+el9.8.0+24146+e179c349
  • galera-debugsource< 0:26.4.25-1.el10_2 | < 0:26.4.25-1.module+el9.8.0+24146+e179c349
  • mariadb< 3:11.8.6-2.module+el9.8.0+24146+e179c349
  • mariadb-backup< 3:11.8.6-2.module+el9.8.0+24146+e179c349
Ubuntu4 products
  • mariadbAll versions (No fix recorded)
  • mariadb-10.0All versions (No fix recorded)
  • mariadb-10.3All versions (No fix recorded)
  • mariadb-10.6All versions (No fix recorded)
Chainguard2 products
  • mariadb-11.8< 11.8.9-r1
  • mariadb-12.1All versions (No fix recorded)
Mariadb2 products
  • mariadbEOL≥ 11.4.1, < 11.4.10 | ≥ 11.8.1, < 11.8.6 | 12.1.2
  • server≥ 11.4.1, < 11.4.10 | ≥ 11.8.1, < 11.8.6 | ≥ 12.1.2, < 12.2.2
Suse2 products
  • mariadb&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 11.8.6-150700.3.12.1
  • mariadb&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7< 11.8.6-150700.3.12.1
Wolfi2 products
  • mariadb-11.8< 11.8.9-r1
  • mariadb-12.1All versions (No fix recorded)
Debian1 product
  • mariadb< 1:11.8.6-0+deb13u1 | < 1:11.8.6-1
Opensuse1 product
  • mariadb&distro=openSUSE Tumbleweed< 11.8.6-1.1

8 vendors · 67 products

References

17 links
Show all 17 references