CVE-2026-114654

A numeric-type conversion flaw in the BSON handling library of the MongoDB C Driver allows an out-of-range binary subtype value supplied through untrusted textual input to bypass the library's binary-element integrity checks. When such a value is later encoded, it is narrowed to a smaller wire...

EUVD-2026-108328

A numeric-type conversion flaw in the BSON handling library of the MongoDB C Driver allows an out-of-range binary subtype value supplied through untrusted textual input to bypass the library's binary-element integrity checks. When such a value is later encoded, it is narrowed to a smaller wire...

CVE-2026-114654 BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards

A numeric-type conversion flaw in the BSON handling library of the MongoDB C Driver allows an out-of-range binary subtype value supplied through untrusted textual input to bypass the library's binary-element integrity checks. When such a value is later encoded, it is narrowed to a smaller wire...

CVE-2026-114654

The MongoDB C# Driver contains a numeric-type conversion flaw in its BSON handling library . An unauthenticated party can provide untrusted textual input containing an out-of-range binary subtype value , which bypasses integrity checks. During subsequent encoding, the value is narrowed to a small...