a NULL pointer dereference located in get_sort_by_table function within sql/sql_select.cc at line 28069.

This vulnerability is located in MariaDB's get_sort_by_table function within sql/sql_select.cc at line 28069. The issue is caused by a NULL pointer dereference when accessing table->table->map without proper null-checks. During the execution of make_join_statistics, the code assumes valid table pointers, which may not hold under certain malformed queries, leading to a segmentation fault. An attacker can exploit this to trigger a denial-of-service (DoS).