CVE-2026-119279 | MariaDB Connector/J up to 3.3.6/3.4.4/3.5.9 Connection out-of-bounds

October 29, 2026 Yanac

A vulnerability classified as problematic has been found in MariaDB Connector and J up to 3.3.6/3.4.4/3.5.9. This affects the function ReadableByteBuf.readLength/ReadableByteBuf.readIntLengthEncodedNotNull of the component Connection Handler. The manipulation leads to out-of-bounds read.

This vulnerability is uniquely identified as CVE-2026-119279. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More