What is the CVSS score of CVE-2026-32710?

CVE-2026-32710 has a CVSS 3.1 base score of 8.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Red Hat are affected by CVE-2026-32710?

MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 contain a heap overflow vulnerability in the JSON_SCHEMA_VALID() function that allows authenticated database users to crash the database…. A patch is available.

Red Hat CVE-2026-32710

EUVD-2026-13764 HIGH

Heap-based Buffer Overflow (CWE-122)

2026-03-20 GitHub_M

RCE Buffer Overflow Heap Overflow Red Hat Suse

8.5

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:19 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

12.2.2,11.4.10,11.8.6

EUVD ID Assigned

Mar 20, 2026 - 18:46 euvd

EUVD-2026-13764

Analysis Generated

Mar 20, 2026 - 18:46 vuln.today

CVE Published

Mar 20, 2026 - 18:31 nvd

HIGH 8.5

DescriptionNVD

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.

AnalysisAI

Authenticated users can trigger a heap overflow in MariaDB 11.4 (before 11.4.10) and 11.8 (before 11.8.6) through the JSON_SCHEMA_VALID() function, causing denial of service and potentially remote code execution under specific memory layout conditions. The vulnerability requires valid database credentials and affects server availability and integrity across scope boundaries. …

RemediationAI

Within 24 hours: inventory all MariaDB deployments and identify systems running versions 11.4.0-11.4.9 or 11.8.0-11.8.5. Within 7 days: upgrade MariaDB 11.4 to version 11.4.10 or later, and upgrade MariaDB 11.8 to version 11.8.6 or later. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory