A vulnerability in Oracle MySQL Server's InnoDB component affects multiple supported versions including 8.0.0 through 8.0.41, 8.4.0 through 8.4.4, and 9.0.0 through 9.2.0. This flaw allows a high-privileged attacker with network access to cause denial of service by hanging or crashing the server and to perform unauthorized data modifications such as update, insert, or delete. The vulnerability has a CVSS 3.1 base score of 5.5, indicating a medium severity with impacts on integrity and availability. Oracle has addressed this vulnerability in its April 2025 Critical Patch Update, which includes patches for the affected MySQL versions. Customers are strongly advised to apply these patches promptly to mitigate the risk.