Buffer Overflow Vulnerability in MariaDB Server
CVE-2026-85745
4.3MEDIUM
What is CVE-2026-85745?
The MariaDB server, a well-known fork of MySQL, is susceptible to a buffer overflow issue affecting various versions. When handling invalid Well-Known Binary (WKB) data for MultiPolygons, the ST_Area function reads beyond the allocated buffer due to improper input validation. This flaw enables a low-privileged remote attacker to supply crafted spatial data, potentially disclosing sensitive memory information. It can be exploited to bypass Address Space Layout Randomization (ASLR) as part of a larger attack vector. This vulnerability has been addressed in subsequent versions of the MariaDB server.
Affected Version(s)
server >= 10.6.1, < 10.6.28 < 10.6.1, 10.6.28
server >= 10.11.1, < 10.11.19 < 10.11.1, 10.11.19
server >= 11.4.1, < 11.4.13 < 11.4.1, 11.4.13