MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
https://security.netapp.com/advisory/ntap-20220526-0006/
https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html