CVE-2021-46658: MariaDB

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.

Affected products

• MariaDB MariaDB: from 10.2.0, before 10.2.40 (fixed in 10.2.40); from 10.3.0, before 10.3.31 (fixed in 10.3.31); from 10.4.0, before 10.4.21 (fixed in 10.4.21); from 10.5.0, before 10.5.12 (fixed in 10.5.12); from 10.6.0, before 10.6.3 (fixed in 10.6.3)

Published 2022-01-29. Last modified 2026-06-17.