When mariadb server has binlog_checksum=NONE, mariadb_rpl_fetch is still assuming there's a checksum at the end of the packet, and gives 4 bytes too short SQL in QUERY_EVENT and ANNOTATE_ROWS_EVENT.
It seems to be caused at line 238 in mariadb_rpl.c
Which should have been
And for ANNOTATE_ROWS_EVENT, at line 305:
which should be, similarly: