Search: CVE-2026-107815

An out-of-bounds write vulnerability exists in the MariaDB server's CONNECT engine DOS table type in certain versions. This flaw allows an authenticated user with CONNECT engine access to write a null byte beyond a stack buffer boundary, potentially causing a crash or remote code execution. The issue affects multiple MariaDB versions starting from 10.6.1 up to but not including fixed versions such as 10.6.28 and others. The vulnerability has a high severity score of 8.5 and is addressed in specific patched versions.