Fedora 45 : mongo-c-driver (2026-54d95e524b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-54d95e524b advisory. libbson 2.5.6 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix bsonwriterne...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mongo-c-driver (UTSA-2026-146969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146969 advisory. An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over- precision inputs containing leading zeros instead of rejecting...

Fedora 43 : mongo-c-driver (2026-b1f7d859d3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b1f7d859d3 advisory. libbson 1.30.13 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix...

Fedora 44 : mongo-c-driver (2026-4f2386f4ac)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4f2386f4ac advisory. libbson 1.30.13 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix...

Linux Distros Unpatched Vulnerability : CVE-2026-106438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over- precision inputs containing leading zeros instead of...

CVE-2026-106438

A flaw was found in the MongoDB C Driver. This vulnerability allows an attacker to compromise data integrity by causing an application to store or process incorrect numeric values. Due to a calculation error during Decimal128 string parsing, the driver accepts certain over-precision numbers with...

DEBIAN-CVE-2026-106438

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

CVE-2026-106438

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

CVE-2026-106438

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

UBUNTU-CVE-2026-106438

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

CVE-2026-106438

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

CVE-2026-106438 Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

CVE-2026-106438 Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

CVE-2026-106438

The MongoDB C Driver contains a vulnerability in its Decimal128 string parsing logic. An incorrect calculation during exactness checks allows the driver to accept certain over-precision inputs containing leading zeros rather than rejecting them. This results in the creation of a numeric value tha...

EUVD-2026-95154

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

CVE-2026-106438 Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

CVE-2026-106438

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

CVE-2026-106438: Incorrect Calculation

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application,...

PT-2026-108141

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description An incorrect calculation in Decimal128 string parsing allows the driver to accept certain over-precision inputs containing leading zeros instead of rejecting them. This results in th...