CVE-2026-107821

Summary

MariaDB server fails to properly validate metadata in FRM files during binary file opening, allowing attackers with write access to the data directory to trigger out-of-bounds memory accesses that can lead to crashes or code execution.

Exploitability

Exploitation requires an attacker to place a crafted FRM file in the MariaDB data directory, making it moderately difficult but possible, especially in environments where users can write to database storage locations.

Blast radius

If exploited, this vulnerability could affect all MariaDB instances running versions 10.6.1 through 10.6.27, 10.11.1 through 10.11.18, 11.4.1 through 11.4.12, 11.8.1 through 11.8.8, 12.3.1 through 12.3.2, and 13.0.1 or earlier, potentially leading to complete database server compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to MariaDB 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, or 13.0.2 immediately.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.