CVE-2026-32710
CriticalAdvisory
Published 20 Mar 2026In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.9
- base score, highest
- EPSS
- 0.009
- 56th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 52
- of 17,781 indexed, latest versions
- Container images
- 36
- deployed by those charts
- Fix available
- 3 of 6
- affected packages
Heap-based Buffer Overflow in MariaDB
Carried by container images the latest versions of 52 of 17,781 indexed charts deploy, on 36 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| mariadbdeb | 1:10.11.8-0ubuntu0.24.04.1, 1:10.11.14-0ubuntu0.24.04.1, 1:11.4.13+maria~ubu2404, 1:11.7.2+maria~ubu2404+7 more | 1:11.8.6-0+deb13u1 | 25 |
| mariadbbitnami | 11.4.3-0, 11.4.5-2, 11.4.7-0, 11.8.2-0 | 11.4.10 | 5 |
| mariadb-10.1deb | 1:10.1.47-0ubuntu0.18.04.1, 1:10.1.48-0ubuntu0.18.04.1 | no fix listed | 2 |
| mariadb-10.6deb | 1:10.6.7-2ubuntu1, 1:10.6.28+maria~ubu2204 | no fix listed | 2 |
| mariadb-10.3deb | 1:10.3.34-0ubuntu0.20.04.1 | no fix listed | 1 |
| mariadbrpm | 3:10.5.29-3.el9_7 | 3:11.8.6-2.module+el9.8.0+40192+484cc2de | 1 |
- OSV records
- BIT-mariadb-2026-32710DEBIAN-CVE-2026-32710RLSA-2026:19182UBUNTU-CVE-2026-32710
- Also known as
- BIT-mariadb-min-2026-32710, BIT-mysql-client-2026-32710, GHSA-4rj5-2227-9wgc
Charts affected
52 by stars
Container images carrying it
36 by charts deploying them
A fixed version is listed for 3 of the 6 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | dd9b303aed4f | mariadb | no fix listed | 12 |
| bitnamilegacy/ | 33ce23601fc9 | mariadb | 11.4.10 | 2 |
| library/ | 607835cd628b | mariadb | no fix listed | 2 |
| library/ | 611a2fcc5fa7 | mariadb | no fix listed | 2 |
| library/ | 92e50059ea0a | mariadb-10.6 | no fix listed | 2 |
| library/ | ab1c3dd38194 | mariadb | no fix listed | 2 |
| ghcr.io/ | 4ee0764310e7 | mariadb-10.1 | no fix listed | 2 |
| bitnamilegacy/ | 8b3778160e34 | mariadb | 11.4.10 | 1 |
| bitnamilegacy/ | 8bc50a0961a7 | mariadb | 11.4.10 | 1 |
| bitnamilegacy/ | 90dc6acb7b2e | mariadb | 11.4.10 | 1 |
| bitnamilegacy/ | bbd4e17f1ef8 | mariadb | 11.4.10 | 1 |
| boky/ | aafc77238423 | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| eclipseaerios/ | e7f5ba0bc64d | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| library/ | 2439dcd7d140 | mariadb | no fix listed | 1 |
| library/ | 5b6a1eac15b8 | mariadb | no fix listed | 1 |
| library/ | 628f228f0fd5 | mariadb | no fix listed | 1 |
| library/ | a02fe89cb597 | mariadb | no fix listed | 1 |
| library/ | b1cb255a9939 | mariadb | no fix listed | 1 |
| library/ | fcc7fcd7114a | mariadb | no fix listed | 1 |
| library/ | da5aee29682d | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| mintproject/ | 83aade2c1855 | mariadb-10.3 | no fix listed | 1 |
| openvpn/ | 2253c10ec652 | mariadb | no fix listed | 1 |
| photoprism/ | 2954334adbda | mariadb-10.6 | no fix listed | 1 |
| photoprism/ | db16ee6b1ba3 | mariadb | no fix listed | 1 |
| photoprism/ | fc6fd632ca74 | mariadb | no fix listed | 1 |
| pschiffe/ | 37ebba8c2b8f | mariadb | 3:11.8.6-2.module+el9.8.0+40192+484cc2de | 1 |
| sonroyaalmerol/ | 3f60f3abe990 | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| vaultwarden/ | 43498a94b22f | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| ghcr.io/ | a2be95de450c | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| ghcr.io/ | d89a6d21e361 | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| ghcr.io/ | 3225d2bc6b3c | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| ghcr.io/ | e59ebde55709 | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| ghcr.io/ | 57ad9565bff3 | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| ghcr.io/ | 665f2f5cc548 | mariadb | 1:11.8.6-0+deb13u1 | 1 |
| ghcr.io/ | 8e6a9516eac0 | mariadb-10.1 | no fix listed | 1 |
| registry.gitlab.com/ | 166a06f73d8c | mariadb | no fix listed | 1 |