Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-84969

Опубликовано: 03 сент. 2026
Источник: nvd
CVSS3: 3.7
EPSS Низкий

Описание

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:mongodb:*:*
Версия от 1.30.0 (включая) до 1.30.9 (исключая)
cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:mongodb:*:*
Версия от 2.0.0 (включая) до 2.5.2 (исключая)

EPSS

Процентиль: 19%
0.00271
Низкий

3.7 Low

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 3.7
ubuntu
2 месяца назад

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.

CVSS3: 3.7
debian
2 месяца назад

A memory-handling error in the BSON-to-JSON conversion helpers of the ...

CVSS3: 3.7
redos
5 дней назад

Множественные уязвимости mongo-c-driver

CVSS3: 3.7
redos
5 дней назад

Множественные уязвимости mongo-c-driver

CVSS3: 3.7
github
2 месяца назад

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.

EPSS

Процентиль: 19%
0.00271
Низкий

3.7 Low

CVSS3

Дефекты

CWE-787