[MDEV-40678] mysql_json plugin OOB reads - Jira

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Blocker
Resolution: Fixed
Affects Version/s: 10.6(EOL), 10.11, 11.4, 11.8, 12.3
Fix Version/s: 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2
Component/s: JSON, Plugins
Labels:
- Cloned

Bug Category:
Can result in unexpected behaviour

Description

mysql_json plugin did not always validate bytes it was reading from MySQL binary JSON table a corrupted MySQL table could've caused OOB reads or crashes.

Reported by Yuelin Wang

Attachments

Issue Links

links to

CVE-2026-107817

GHSA-89ph-64cf-gqcc

Activity

People

Assignee:: Sergei Golubchik

Reporter:: Sergei Golubchik

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 2026-08-09 07:15

Updated:: 2026-10-11 15:19

Resolved:: 2026-08-10 10:56

Time Tracking

Estimated:

Not Specified

Remaining:

Logged:

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.