CVE-2021-46658

MEDIUM 5.5CVE-2021-46658 · Published 29/01/2022 · updated 17/06/2026

In short

CVE-2021-46658 is a MEDIUM (CVSS 5.5) vulnerability affecting mariadb (mariadb).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 32.8% of all vulnerabilities.
Fix: update to 10.2.40, 10.3.31, 10.4.21, 10.5.12 or later.

Package	Affected versions	Patched versions
mariadb mariadb	`≥ 10.2.0, < 10.2.40≥ 10.3.0, < 10.3.31≥ 10.4.0, < 10.4.21≥ 10.5.0, < 10.5.12≥ 10.6.0, < 10.6.3`	`10.2.4010.3.3110.4.2110.5.1210.6.3`

Description

save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.

References

jira.mariadb.org/browse/MDEV-25630 · Exploit
mariadb.com/kb/en/security · Patch
security.netapp.com/advisory/ntap-20220221-0002 · Third Party Advisory

More vulnerabilities in mariadb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mariadb

≥ 10.2.0, < 10.2.40≥ 10.3.0, < 10.3.31≥ 10.4.0, < 10.4.21≥ 10.5.0, < 10.5.12≥ 10.6.0, < 10.6.3

10.2.4010.3.3110.4.2110.5.1210.6.3

More vulnerabilities in mariadb

See all →