MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27456.json"
}{
"extracted_events": [
{
"introduced": "10.3.0"
},
{
"fixed": "10.3.35"
},
{
"introduced": "10.4.0"
},
{
"fixed": "10.4.25"
},
{
"introduced": "10.5.0"
},
{
"fixed": "10.5.16"
},
{
"introduced": "10.6.0"
},
{
"fixed": "10.6.8"
},
{
"introduced": "10.7.0"
},
{
"fixed": "10.7.4"
}
],
"source": "CPE_FIELD",
"cpe": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"
}