A heap-based buffer overflow vulnerability in MariaDB Server could allow an authenticated attacker to cause a service crash or achieve remote code execution.

This vulnerability is a heap-based buffer overflow (CWE-122) within the JSON_SCHEMA_VALID function. It requires the attacker to have authenticated access to the database to trigger the flaw.

The vulnerability carries a CVSS score of 8.5, indicating a high level of severity. Successful exploitation could lead to a complete denial of service, impacting business continuity. While remote code execution is theoretically possible, the requirement for precise control over memory layout makes this outcome more likely in laboratory settings than in standard production environments.

Immediate Action: Upgrade MariaDB Server to version 11.4.10, 11.8.6, or 12.2.2 as appropriate for the installed release branch.

Proactive Monitoring: Monitor database audit logs for repeated crashes or unusual execution patterns related to the JSON_SCHEMA_VALID function.

Compensating Controls: Restrict database access permissions for non-administrative users to limit the potential pool of attackers capable of triggering this vulnerability.

Public Exploit Available: Yes, a public proof-of-concept exists in a GitHub repository.

Given the High severity of this vulnerability and the availability of a public proof-of-concept, organizations should prioritize patching affected MariaDB instances. Administrators must verify their version strings against the provided ranges and apply the relevant security updates to eliminate the risk of service disruption or unauthorized code execution.