CVE-2022-27447

HIGH 7.5CVE-2022-27447 · Published 14/04/2022 · updated 17/06/2026

In short

CVE-2022-27447 is a HIGH (CVSS 7.5) vulnerability affecting mariadb (mariadb).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.9% of all vulnerabilities.
Fix: update to 10.3.35, 10.4.25, 10.5.16, 10.6.8 or later.

Package	Affected versions	Patched versions
mariadb mariadb	`≥ 10.3.0, < 10.3.35≥ 10.4.0, < 10.4.25≥ 10.5.0, < 10.5.16≥ 10.6.0, < 10.6.8≥ 10.7.0, < 10.7.4`	`10.3.3510.4.2510.5.1610.6.810.7.4`

MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 10.3.0, < 10.3.35≥ 10.4.0, < 10.4.25≥ 10.5.0, < 10.5.16≥ 10.6.0, < 10.6.8≥ 10.7.0, < 10.7.4

10.3.3510.4.2510.5.1610.6.810.7.4

More vulnerabilities in mariadb

See all →