Related Vulnerabilities: CVE-2022-27377  

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.

Description

The MITRE CVE dictionary describes this issue as:

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.

Additional Information

  • Bugzilla 2074947: CVE-2022-27377 mariadb: use-after-free in the component Item_func_in::cleanup() of item_cmpfunc.h
  • CWE-416: Use After Free
  • FAQ: Frequently asked questions about CVE-2022-27377