VULNERABILITY INTELLIGENCE

CVE-2022-27377

CVSS score7.5 HIGH

EPSS probability2.34%

CISA KEVNot currently listed

Published2022-04-12

Last modified2026-06-17

Description

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.