CVE-2026-106436

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

CVE-2026-106432

The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting heap buffer overflow can corrupt proces...

CVE-2026-106436

The MongoDB PHP Driver contains a vulnerability in its BSON encoder caused by unchecked return values when a document exceeds the libbson size limit. This flaw can leave the encoder in an invalid state, allowing an unauthenticated actor to trigger a denial of service by terminating the PHP worker...

CVE-2026-106436 Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

CVE-2026-106432

The MongoDB PHP Driver contains a heap buffer overflow vulnerability within its BSON encoder . The root cause is the conversion of string lengths to 32-bit values without proper validation; when encoding strings near 4 GiB , the allocation size can wrap while the copy operation maintains the orig...

CVE-2026-106432 Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting heap buffer overflow can corrupt proces...

jsoncons:fuzz_bson_encoder: Index-out-of-bounds in jsoncons::bson::decimal128_from_chars

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=5420549982519296 Project: jsoncons Fuzzing Engine: libFuzzer Fuzz Target: fuzzbsonencoder Job Type: libfuzzerubsanjsoncons Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...