CVE-2026-107815: CWE-787: Out-of-bounds Write in MariaDB server

CVE-2026-107815 is an out-of-bounds write vulnerability in the MariaDB server's CONNECT engine DOS table type. From versions 10.6.1 up to but not including 10.6.28, 10.11.1 up to 10.11.19, 11.4.1 up to 11.4.13, 11.8.1 up to 11.8.9, 12.3.1 up to 12.3.3, and 13.0.1 up to 13.0.2, an incorrect boundary check permits a one-byte null write beyond a stack buffer at an attacker-controlled offset. An authenticated user able to use the CONNECT engine could exploit this to cause a denial of service (crash) or potentially achieve remote code execution. The vulnerability has been addressed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Successful exploitation can lead to a denial of service via server crash and potentially remote code execution, allowing an attacker with low privileges (authenticated user with CONNECT engine access) to compromise the MariaDB server. The CVSS v3.1 score is 8.5 (high severity) reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requiring low privileges but high attack complexity.

A fix is available and has been released in MariaDB server versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. Users should upgrade to these or later versions to remediate the vulnerability. No additional mitigation guidance is provided or required beyond applying the official patches.