CVE-2026-106432 Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting heap buffer overflow can corrupt proces...

CVE-2026-106432

A heap buffer overflow exists in the MongoDB PHP Driver due to the BSON encoder converting string lengths to 32-bit values without validation. When an application encodes a string near 4 GiB , the allocation size can wrap while the copy operation uses the original length, potentially corrupting p...

CVE-2026-52052

mgtlsparsecertder pubkey BIT STRING length underflow -- OOB read...