CVE-2026-107816

A flaw was found in MariaDB. An authenticated user can execute a database query containing embedded null bytes, which misleads the query cache information (qc_info) plugin. When the cached query details are later read from the information schema, the server accesses memory beyond the allocated buffer. This issue can lead to unauthorized information disclosure or cause a denial of service (DoS) by crashing the database server.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.