CVE-2026-85746
Description
A flaw was found in MariaDB. An authenticated remote attacker with low privileges can cause memory corruption and potentially achieve arbitrary code execution by submitting specially crafted Geographic Information System (GIS) objects. This issue is caused by an out-of-bounds write in the ST_AsText function, which fails to allocate sufficient buffer space during the conversion of deeply nested geometry collections.
Statement
Red Hat has rated this vulnerability as having an Important impact because an authenticated network user with basic query privileges can cause server memory corruption or terminate the daemon, elevating the risk beyond Moderate despite requiring valid credentials. In typical Red Hat Enterprise Linux environments, MariaDB's spatial data handling functions are enabled by default and accessible to standard database accounts. While chaining with additional vulnerabilities would be required to achieve arbitrary code execution, any low-privileged database user can exploit the flaw to disrupt service availability.
Mitigation
Upgrade to the fixed version of MariaDB Server
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
