22649 matches found
CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...
CVE-2026-106437
The MongoDB C Driver contains an out-of-bounds read and write vulnerability within its BSON buffer-reservation API. The root cause is an integer underflow (CWE-191) that occurs when the API records a length smaller than the five-byte BSON minimum. Subsequent append or comparison operations can tr...
CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...
Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...
EUVD-2026-95152
An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent...
CVE-2026-106431
An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent...
CVE-2026-106431
The MongoDB C Driver contains a one-byte heap buffer overflow in the BSON bulk document writer . An off-by-one error allows a zero byte to be written past a heap allocation when a document ends at a specific buffer boundary. This vulnerability can lead to process memory corruption or a process te...
CVE-2026-106431 One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver
An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent...
One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver
An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent...
EUVD-2026-95144
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2026-106428
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2026-106428
The MongoDB C Driver is vulnerable to an out-of-bounds read during SCRAM authentication response parsing . Specifically, processing a malformed server-final message can cause the driver to read one byte beyond a fixed-size buffer. A server or network intermediary capable of providing this message...
CVE-2026-106428 Out-of-bounds read in SCRAM response parsing in MongoDB C Driver
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
Out-of-bounds read in SCRAM response parsing in MongoDB C Driver
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2025-46817-PoC
Exploit de débordement d'entier CVE-2025-46817 pour Redis Une implémentation légère en C de l'exploit CVE-2025-46817 pour la vulnérabilité de débordement d'entier dans Redis. 🚀 Fonctionnalités Léger : Un seul fichier C, aucune dépendance externe en dehors de hiredis Rapide : Compilation native po...
PoC-CVE-2021-4034
PoC-CVE-2021-4034 Référence du PoC https://github.com/arthepsy/CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Utilisation : gcc PoC.c -o PoC ./PoC...
f_poc_cve-2021-4034
fpoccve-2021-4034 utilisation cd /tmp git clone https://github.com/jcatala/fpoccve-2021-4034/ cd fpoccve-2021-4034 gcc -fPIC -c ISO646.c ld -shared -shared ISO646.o -o s.so gcc f.c -o f ./f...
CVE-2026-31431.c
CVE-2026-31431.c Ce contenu est fourni à des fins éducatives uniquement. L'auteur décline toute responsabilité en cas d'erreurs ou d'omissions dans le contenu. Toutes les informations sont fournies « en l'état », sans garantie d'exhaustivité, d'exactitude, d'utilité ou d'actualité. Toute action...
copyfail-c
copyfail-c Une reproduction minimale en C pour la recherche sur Copy Fail CVE-2026-31431. Ce dépôt contient une implémentation compacte en C construite autour de l'interface AFALG du noyau Linux pour la recherche de vulnérabilités, l'analyse de comportement et la reproduction contrôlée. Structure...