MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.

CPENameOperatorVersion
mysql-clientge10.2.0
mysql-clientlt10.2.44
mysql-clientge10.3.0
mysql-clientlt10.3.35
mysql-clientge10.4.0
mysql-clientlt10.4.25
mysql-clientge10.5.0
mysql-clientlt10.5.16
mysql-clientge10.6.0
mysql-clientlt10.6.8

Name	Operator	Version
mysql-client	ge	10.2.0
mysql-client	lt	10.2.44
mysql-client	ge	10.3.0
mysql-client	lt	10.3.35
mysql-client	ge	10.4.0
mysql-client	lt	10.4.25
mysql-client	ge	10.5.0
mysql-client	lt	10.5.16
mysql-client	ge	10.6.0
mysql-client	lt	10.6.8