CVE-2026-81526

The MongoDB Rust Driver fails to neutralize special characters in a caller-supplied target identifier before embedding it in requests sent to the server. Per the CVELIST entry, the specific root cause is an unvalidated dotted database name in bulk write namespaces , allowing an attacker with low ...

CVE-2026-81526 Cross-database write redirection via unvalidated dotted database name in bulk write namespaces

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...

CVE-2026-81526 Cross-database write redirection via unvalidated dotted database name in bulk write namespaces

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...

EUVD-2026-67205

The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name...

The vulnerability of the xdbc_bulk_write() function in the drivers/usb/early/xhci-dbc.c driver for USB devices in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xdbcbulkwrite function in the drivers/usb/early/xhci-dbc.c driver for USB devices in Linux operating systems is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2023-53840 usb: early: xhci-dbc: Fix a potential out-of-bound memory access

In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bound memory access If xdbcbulkwrite fails, the values in 'buf' can be anything. So the string is not guaranteed to be NULL terminated when xdbctrace is called. Reserve an extra byte,...

CVE-2023-53840

The CVE-2023-53840 issue in the Linux kernel is fixed in the usb: early: xhci-dbc path. If xdbc_bulk_write() fails, the contents of buf could be non-deterministic and not NULL-terminated when xdbc_trace() runs, risking a potential out-of-bounds read. The patch reserves an extra byte in the static...

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-12119

CVE-2025-12119 affects the MongoDB C driver: when using a bulk operation, mongoc_bulk_operation_t may read invalid memory if large options are passed. Connected advisories confirm the issue in the mongo-c-driver and reference Debian’s fix in version 1.17.6-1+deb11u2 for bullseye. Other listings (...

Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

PT-2025-28004

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the media component, specifically the cxusb module. The issue occurred when the write operation of usb bulk msg in dvb...

PT-2025-49731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to out-of-bound memory access within the xhci-dbc driver. Specifically, if the xdbc bulk write function fails, the buffer used by the xdbc trace...