CVE-2025-50102 — mysql: Optimizer unspecified vulnerability (CPU Jul 2025)

Back Back to CVE browser

MEDIUM

mysql: Optimizer unspecified vulnerability (CPU Jul 2025)

Published Jul 15, 2025

4.9

MEDIUM

CVSS 3.1

EPSS 0.50%

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected products

Vendor Oracle Corporation Product MySQL Server Default
n/a
- Version
  8.0.0
  Status
  affected
  Constraints
  <=8.0.42
- Version
  8.4.0
  Status
  affected
  Constraints
  <=8.4.5
- Version
  9.0.0
  Status
  affected
  Constraints
  <=9.3.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oracle Corporation

MySQL Server

n/a

Version	Status	Constraints
8.0.0	affected	<=8.0.42
8.4.0	affected	<=8.4.5
9.0.0	affected	<=9.3.0

Red Hat Enterprise Linux 10

mysql-selinux-0:1.0.14-1.el10_0

Fixed · RHSA-2025:15699
Red Hat Enterprise Linux 10

mysql8.4-0:8.4.6-2.el10_0

Fixed · RHSA-2025:15699
Red Hat Enterprise Linux 8

mysql:8.0-8100020250917205715.489197e6

Fixed · RHSA-2025:16861
Red Hat Enterprise Linux 9

mysql-0:8.0.43-1.el9_6

Fixed · RHSA-2025:16086
Red Hat Enterprise Linux 9

mysql:8.4-9060020250910121712.rhel9

Fixed · RHSA-2025:16046
Red Hat Enterprise Linux 6

mysql

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	mysql-selinux-0:1.0.14-1.el10_0	Fixed	RHSA-2025:15699
Red Hat Enterprise Linux 10	mysql8.4-0:8.4.6-2.el10_0	Fixed	RHSA-2025:15699
Red Hat Enterprise Linux 8	mysql:8.0-8100020250917205715.489197e6	Fixed	RHSA-2025:16861
Red Hat Enterprise Linux 9	mysql-0:8.0.43-1.el9_6	Fixed	RHSA-2025:16086
Red Hat Enterprise Linux 9	mysql:8.4-9060020250910121712.rhel9	Fixed	RHSA-2025:16046
Red Hat Enterprise Linux 6	mysql	Not affected	n/a

Remediation

No remediation recorded yet.

Metrics

0.50% 0.00495

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00495

Score over time

2025–2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.50% (0.00495)	40.20th	v5 (v2026.06.15)
Jun 15, 2026	0.47% (0.00472)	36.92th	v5 (v2026.06.15)
Jul 16, 2025	0.04% (0.00037)	9.69th	v4 (v2025.03.14)

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (6)

https://access.redhat.com/security/cve/CVE-2025-50102
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2380335
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2025-50102
https://www.cve.org/CVERecord?id=CVE-2025-50102
https://www.oracle.com/security-alerts/cpujul2025.html
vendor-advisoryVendor Advisory
https://www.oracle.com/security-alerts/cpujul2025.html#AppendixMSQL

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2025-50102		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2380335		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2025-50102
https://www.cve.org/CVERecord?id=CVE-2025-50102
https://www.oracle.com/security-alerts/cpujul2025.html		vendor-advisoryVendor Advisory
https://www.oracle.com/security-alerts/cpujul2025.html#AppendixMSQL