CVE-2022-27382: MariaDB

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.

Affected products

• MariaDB MariaDB: from 10.4.0, before 10.4.25 (fixed in 10.4.25); from 10.5.0, before 10.5.16 (fixed in 10.5.16); from 10.6.0, before 10.6.8 (fixed in 10.6.8); from 10.7.0, before 10.7.4 (fixed in 10.7.4)

Published 2022-04-12. Last modified 2026-06-17.