CVE-2026-120954

A weakness in the BSON library 's handling of a specialized binary vector data type allows an arithmetic wraparound (CWE-190) when processing an oversized attacker-supplied value. On builds with a 32-bit platform word size , an application parsing untrusted BSON data may only process a small frac...

CVE-2026-120954 Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views

A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when computing the number of elements described by an oversized attacker-supplied value. On builds where the platform word size is 32 bits, an application that parses untrusted BSON...