Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-87jr-c2qj-3qrg

Опубликовано: 20 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6
CVSS3: 5.9

Описание

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).

EPSS

Процентиль: 20%
0.00281
Низкий

6 Medium

CVSS4

5.9 Medium

CVSS3

Дефекты

CWE-1285

Связанные уязвимости

CVSS3: 5.9
ubuntu
2 месяца назад

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).

CVSS3: 5.9
nvd
2 месяца назад

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).

CVSS3: 5.9
debian
2 месяца назад

The MongoDB C Driver's legacy GridFS API accepts malformed file metada ...

EPSS

Процентиль: 20%
0.00281
Низкий

6 Medium

CVSS4

5.9 Medium

CVSS3

Дефекты

CWE-1285