CVE-2026-106438

The MongoDB C Driver contains a vulnerability in its Decimal128 string parsing logic. An incorrect calculation during exactness checks allows the driver to accept certain over-precision inputs containing leading zeros rather than rejecting them. This results in the creation of a numeric value tha...