A vulnerability in Oracle MySQL Server's InnoDB component affects versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. It allows a high-privileged attacker with network access to cause a denial of service via server hang or crash and unauthorized modification of some accessible data. The CVSS 3.1 base score is 5.5, indicating medium severity with integrity and availability impacts. Oracle has released patches as part of the January 2025 Critical Patch Update.