Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-87jr-c2qj-3qrg

Опубликовано: 20 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6
CVSS3: 5.9

Описание

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).

EPSS

Процентиль: 22%
0.00295
Низкий

6 Medium

CVSS4

5.9 Medium

CVSS3

Дефекты

CWE-1285

Связанные уязвимости

CVSS3: 5.9
ubuntu
4 месяца назад

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).

CVSS3: 5.9
nvd
4 месяца назад

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).

CVSS3: 5.9
debian
4 месяца назад

The MongoDB C Driver's legacy GridFS API accepts malformed file metada ...

EPSS

Процентиль: 22%
0.00295
Низкий

6 Medium

CVSS4

5.9 Medium

CVSS3

Дефекты

CWE-1285