Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-119277

MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, decoders for OK packet session-state blocks, column definition packets, text row data, or binary row data used server-declared lengths without confirming that the requested bytes remained in the receive buffer. The decoders could position reads, create sub-buffers, or decode strings beyond the packet boundary. A malicious or compromised server, or a machine-in-the-middle attacker, could trigger unchecked ArrayIndexOutOfBoundsException or IllegalArgumentException failures inside JDBC calls and terminate connection handling. This issue is fixed in versions 3.3.7, 3.4.5, and 3.5.11.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mariadb-corporation mariadb-connector-j

  • >= 3.0.0, < 3.3.7affected
  • >= 3.4.0, < 3.4.5affected
  • >= 3.5.0, < 3.5.11affected

References