Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xr7-hhfx-wh4c

Опубликовано: 03 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 3.7

Описание

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.

EPSS

Процентиль: 19%
0.00271
Низкий

6.3 Medium

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 3.7
ubuntu
2 месяца назад

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.

CVSS3: 3.7
nvd
2 месяца назад

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.

CVSS3: 3.7
debian
2 месяца назад

A memory-handling error in the BSON-to-JSON conversion helpers of the ...

CVSS3: 3.7
redos
4 дня назад

Множественные уязвимости mongo-c-driver

CVSS3: 3.7
redos
4 дня назад

Множественные уязвимости mongo-c-driver

EPSS

Процентиль: 19%
0.00271
Низкий

6.3 Medium

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-787