Exploit in MySQL Server from Oracle Allowing System Crashes and Data Manipulation

CVE-2025-21497

Summary

A vulnerability exists in the MySQL Server product from Oracle, specifically within the InnoDB component. This flaw affects multiple versions of MySQL, allowing a high-privileged attacker with network access to exploit the server using various protocols. The vulnerability can lead to unauthorized updates, insertions, or deletions of data accessible through MySQL Server. Additionally, successful exploitation may cause the server to hang or repeatedly crash, leading to service disruptions and potential data loss.

References