BIT-mariadb-min-2026-85748

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/mariadb-min/BIT-mariadb-min-2026-85748.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-mariadb-min-2026-85748

Aliases

Published

2026-10-21T08:53:11Z

Modified

2026-10-21T12:11:07Z

Summary

MariaDB: Use-after-free with a large number of SYS_REFCURSOR's

Details

MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYS_REFCURSORs and then fetch one to trigger a use-after-free that can enable remote code execution when combined with another vulnerability. This issue is fixed in versions 12.3.3 and 13.0.2.

Database specific

{
    "cpes":  [
        "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"
    ],
    "severity":  "Critical"
}

References

Affected packages

Bitnami / mariadb-min

Package

Name: mariadb-min
Purl: pkg:bitnami/mariadb-min

Severity

9.9 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

12.3.1

Fixed

12.3.3

Introduced

13.0.1

Fixed

13.0.2

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/mariadb-min/BIT-mariadb-min-2026-85748.json"