3 matches found
GHSA-98QM-WVGF-W4CF MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element
Impact The C extension's BSON decoder scans a Regex element's pattern and flags strings with strlen before checking the document's remaining length, so a crafted truncated Regex element can read past the end of the caller's buffer. bson.decode and bson.decodeall accept mmap and array buffers, whi...
MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element
Impact The C extension's BSON decoder scans a Regex element's pattern and flags strings with strlen before checking the document's remaining length, so a crafted truncated Regex element can read past the end of the caller's buffer. bson.decode and bson.decodeall accept mmap and array buffers, whi...
Duplicate Advisory: PYTHON-6110 Out-of-bounds read in BSON decoding via a malformed Regex element
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-98qm-wvgf-w4cf. This link is maintained to preserve external references. Original Description The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON...