Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mongo-c-driver (UTSA-2026-146977)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146977 advisory. The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can...

Fedora 44 : mongo-c-driver (2026-4f2386f4ac)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4f2386f4ac advisory. libbson 1.30.13 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix...

Fedora 43 : mongo-c-driver (2026-b1f7d859d3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b1f7d859d3 advisory. libbson 1.30.13 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix...

UBUNTU-CVE-2026-106437

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

CVE-2026-106437

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

CVE-2026-106437

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

CVE-2026-106437: Integer Underflow (Wrap or Wraparound)

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...