This vulnerability exists in the GIS component of Oracle MySQL Server and MySQL Cluster versions 9.7.0 to 9.7.1. It is easily exploitable by an attacker with low privileges and network access through multiple protocols. Successful exploitation results in the ability to cause the MySQL Server or Cluster to hang or crash repeatedly, leading to a complete denial of service. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no impact on confidentiality or integrity, but high impact on availability. The vulnerability is publicly known and published but no explicit remediation or patch is confirmed in the advisory content provided.

The vulnerability allows unauthorized attackers with low privileges and network access to cause a denial of service by hanging or crashing the MySQL Server or MySQL Cluster. There is no impact on data confidentiality or integrity. The primary impact is on availability, potentially disrupting database services.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Until a patch is confirmed and applied, consider restricting network access to MySQL Server and Cluster instances to trusted users and networks to reduce exposure.