CVE-2026-120954

A weakness in the BSON library 's handling of a specialized binary vector data type allows an arithmetic wraparound (CWE-190) when processing an oversized attacker-supplied value. On builds with a 32-bit platform word size , an application parsing untrusted BSON data may only process a small frac...

CVE-2026-120954 Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views

A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when computing the number of elements described by an oversized attacker-supplied value. On builds where the platform word size is 32 bits, an application that parses untrusted BSON...

UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable

uefi-firmware contains a stack out-of-bounds write vulnerability in the native tiano/EFI decompressor. in uefifirmware/compression/Tiano/Decompress.c, MakeTable does not validate that bit-length values read from the compressed bitstream are within the expected range 0..16. a crafted firmware blob...