Use-After-Free Vulnerability in MariaDB Server Impacting Multiple Versions
CVE-2026-85748
9.9CRITICAL
What is CVE-2026-85748?
The MariaDB server, which is a community-developed fork of MySQL, has a vulnerability that arises from improper handling of SYS_REFCURSORs. Specifically, during cursor-array reallocation, stale references may remain within routine contexts. This flaw allows a low-privileged attacker to create a significant number of SYS_REFCURSORs and subsequently fetch one, potentially triggering a use-after-free condition. When exploited in conjunction with another vulnerability, this can lead to remote code execution, emphasizing the need for timely updates to prevent exploitation. The vulnerability has been addressed in MariaDB versions 12.3.3 and 13.0.2.
Affected Version(s)
server >= 12.3.1, < 12.3.3 < 12.3.1, 12.3.3
server >= 13.0.1, < 13.0.2 < 13.0.1, 13.0.2