Description
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and can crash the process.
Published: 2026-09-25
Score: 3.4 Low
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6514-1 php8.4 security update
History

Fri, 25 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and can crash the process.
Title Various packet overreads in mysqlnd_writeprotocol.c
Weaknesses CWE-122
References
Metrics cvssV3_1

{'score': 3.4, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: php

Published:

Updated: 2026-09-25T20:48:21.777Z

Reserved: 2025-02-11T04:49:52.603Z

Link: CVE-2025-1218

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-25T21:17:20.993

Modified: 2026-09-25T21:17:20.993

Link: CVE-2025-1218

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses