CVE-2026-107821

A flaw was found in MariaDB. An attacker able to place a crafted table format (FRM) metadata file into the database data directory can exploit insufficient validation of metadata boundaries and field counts when the server opens the file. This could lead to out-of-bounds memory operations, potentially allowing arbitrary code execution or causing a Denial of Service (DoS) by crashing the database server.

Red Hat has evaluated this vulnerability as Moderate because successful exploitation requires pre-existing privileged access to the database storage location on the host. Under standard Red Hat Enterprise Linux deployments, the database service directory is strictly confined to the dedicated system account and SELinux policies further restrict unauthorized file creation. Because an attacker must already possess high-level operating system rights or elevated database permissions to insert malicious table schema files, typical unauthenticated remote users cannot directly compromise the instance.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Upgrade to the fixed version of MariaDB Server