Memory Allocation Flaw in MariaDB Connector/J Affects Java Applications
CVE-2026-119278
5.9MEDIUM
What is CVE-2026-119278?
The MariaDB Connector/J, used by Java applications to interface with MariaDB and MySQL databases, contains a memory allocation flaw. This vulnerability arises during the caching_sha2_password authentication process when the server sends an unexpectedly large or malformed packet. Such an attack can lead to excessive memory allocation or an unhandled ArrayIndexOutOfBoundsException. It is crucial for users operating versions below 3.3.7 and 3.4.5 to apply the necessary updates to mitigate the risks associated with this vulnerability.
Affected Version(s)
mariadb-connector-j >= 3.0.0, < 3.3.7 < 3.0.0, 3.3.7
mariadb-connector-j >= 3.4.0, < 3.4.5 < 3.4.0, 3.4.5