CVE record · 1 source
CVE-2026-106437
CVSS 6.2The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum.
- Vendor
- MongoDB
- Product
- MongoDB
- CVSS
- 6.2
- Exposure class
- Database
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum.
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the…