Exploitable Integer Handling Issue in MariaDB Connector/J from MariaDB
CVE-2026-119279
5.9MEDIUM
What is CVE-2026-119279?
The MariaDB Connector/J versions from 3.0.0 to 3.3.7, 3.4.5, and 3.5.10 contain a flaw in the ReadableByteBuf.readLength() and ReadableByteBuf.readIntLengthEncodedNotNull() methods, where an unsigned 8-byte length-encoded integer is incorrectly narrowed to a Java int without validation. This can lead to scenarios where malicious or compromised servers exploit this flaw, triggering exceptions such as NegativeArraySizeException or out-of-bounds read operations during client connection handling, resulting in potential service disruptions or data corruption.
Affected Version(s)
mariadb-connector-j >= 3.0.0, < 3.3.7 < 3.0.0, 3.3.7
mariadb-connector-j >= 3.4.0, < 3.4.5 < 3.4.0, 3.4.5
mariadb-connector-j >= 3.5.0, < 3.5.10 < 3.5.0, 3.5.10