CVE-2024-10921 Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server

🗓️ 14 Nov 2024 16:04:04Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Authorized users can crash MongoDB or read memory with malformed BSON; affects 5.0.30, 6.0.19, 7.0.15, 8.0.2.

Reporter	Title	Published	Views	Family All 19
FreeBSD	mongodb -- Buffer over-reads in MongoDB Server	14 Nov 202400:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server affecting MongoDB Enterprised Advanced (CVE-2024-10921)	24 Feb 202621:09	–	ibm
BDU FSTEC	The vulnerability of the MongoDB database management system lies in improper handling of zero bytes during BSON data processing. This allows attackers to gain unauthorized access to protected information or cause service failures.	18 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-10921	14 Nov 202416:12	–	circl
CNNVD	MongoDB 安全漏洞	14 Nov 202400:00	–	cnnvd
CVE	CVE-2024-10921	14 Nov 202416:04	–	cve
Cvelist	CVE-2024-10921 Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server	14 Nov 202416:04	–	cvelist
EUVD	EUVD-2024-33350	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : mongodb -- Buffer over-reads in MongoDB Server (28ffa931-a510-11ef-8109-b42e991fc52e)	18 Nov 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-10921	10 Sep 202500:00	–	nessus

Source	Link
jira	www.jira.mongodb.org/browse/SERVER-96419
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10921.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-10921

22 Jul 2026 02:50Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.8

EPSS0.00537