CVE-2026-114645

The MongoDB C Driver is vulnerable to a heap buffer overflow in its Windows-only Kerberos/SSPI authentication code. A 32-bit integer wraparound occurs when an excessively long credential value is provided in the client's connection configuration, leading to the allocation of an undersized heap bu...