UBUNTU-CVE-2026-114645

A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long credential value is supplied in the client's connection configuration. A party able to control that client-side...

MongoDB C Driver numeric error vulnerability

Versions prior to MongoDB C Driver 1.30.14 and 2.5.7 contain a numeric error vulnerability. This vulnerability stems from a 32-bit integer wrap-around in Windows-specific Kerberos/SSPI authentication code. When excessively long credential values are provided in client connection configurations, a...