CVE-2025-53054: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. This vulnerability was disclosed in October 2025 (Oracle CPU).

The vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. The vulnerability has been assigned a CVSS 3.1 Base Score of 5.5 (Integrity and Availability impacts) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H. The vulnerability has been classified under CWE-400 (Uncontrolled Resource Consumption) (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data (Oracle CPU).

Oracle has released security patches to address this vulnerability. Users are strongly advised to update to the latest version of the affected MySQL Server products. The patches are available through Oracle's Critical Patch Update program for versions under Premier Support or Extended Support phases (Oracle CPU).