CVE-2021-46658

save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.

References

Affected packages

Git / github.com/mariadb/server

Affected ranges

Type

GIT

Repo

https://github.com/mariadb/server

Events

Introduced

9664240c948a92c22ccda0e1f5a420eb776ddcb1

Fixed

b549af69137023ce0f93d312a10d61e467dca07f

Introduced

20ae591abd0bfe1bfaee546989ee163f4ef832b1

Fixed

7f264997dd21c5126350a9a5f0cc0960afdd1229

Introduced

c761b43451d54eeeecdf3c102906fcce88d4e9d9

Fixed

4902b0fdc91cc6dc169dd2322daf966a2eeafdd8

Introduced

7c7f9bef28aa566557da31402142f6dd8298ddd2

Fixed

b5569b62408375f35e2fe851158a7ff17e378ed1

Introduced

1a647b700f6b72dc97211510a5d0c647d5d3d911

Fixed

1f2ccc6db8a3e9be21d7ae599177380e2120d4af

Database specific

Show details

{
    "cpe":  "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "10.2.0"
        },
        {
            "fixed":  "10.2.40"
        },
        {
            "introduced":  "10.3.0"
        },
        {
            "fixed":  "10.3.31"
        },
        {
            "introduced":  "10.4.0"
        },
        {
            "fixed":  "10.4.21"
        },
        {
            "introduced":  "10.5.0"
        },
        {
            "fixed":  "10.5.12"
        },
        {
            "introduced":  "10.6.0"
        },
        {
            "fixed":  "10.6.3"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

mariadb-10.*

mariadb-10.2.0

mariadb-10.2.1

mariadb-10.2.10

mariadb-10.2.11

mariadb-10.2.12

mariadb-10.2.13

mariadb-10.2.14

mariadb-10.2.15

mariadb-10.2.16

mariadb-10.2.18

mariadb-10.2.19

mariadb-10.2.2

mariadb-10.2.20

mariadb-10.2.21

mariadb-10.2.22

mariadb-10.2.23

mariadb-10.2.24

mariadb-10.2.25

mariadb-10.2.26

mariadb-10.2.27

mariadb-10.2.28

mariadb-10.2.29

mariadb-10.2.30

mariadb-10.2.31

mariadb-10.2.39

mariadb-10.2.5

mariadb-10.3.0

mariadb-10.3.1

mariadb-10.3.10

mariadb-10.3.12

mariadb-10.3.16

mariadb-10.3.17

mariadb-10.3.18

mariadb-10.3.19

mariadb-10.3.2

mariadb-10.3.20

mariadb-10.3.21

mariadb-10.3.26

mariadb-10.3.30

mariadb-10.3.4

mariadb-10.3.5

mariadb-10.3.6

mariadb-10.3.7

mariadb-10.4.10

mariadb-10.4.11

mariadb-10.4.20

mariadb-10.4.3

mariadb-10.4.4

mariadb-10.4.5

mariadb-10.4.7

mariadb-10.4.9

mariadb-10.5.0

mariadb-10.5.11

mariadb-10.5.2

mariadb-10.5.4

mariadb-10.6.0

mariadb-10.6.1

mariadb-10.6.2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-46658.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "258070912520669712261283939767978553199",
                "163415287272954152502666917123938658776",
                "49296846038456833842383783174009140961",
                "334843214020125332543169226985653591801"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2021-46658-7d8e5b6a",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/mariadb/server/commit/b549af69137023ce0f93d312a10d61e467dca07f",
        "target":  {
            "file":  "sql/table.cc"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "74524028531176476080637569635616917678",
            "length":  10035
        },
        "id":  "CVE-2021-46658-b6cfa102",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/mariadb/server/commit/b549af69137023ce0f93d312a10d61e467dca07f",
        "target":  {
            "file":  "sql/table.cc",
            "function":  "open_table_from_share"
        }
    }
]

vanir_signatures_modified

"2026-08-18T14:05:21Z"