CVE-2021-32050

CVE-2021-32050 concerns MongoDB drivers that may publish authentication-related data to a configurable command listener, risking exposure of sensitive information when specific authentication commands execute. The issue affects multiple drivers to varying versions (e.g., C Driver <1.17.7, PHP ...

CVE-2024-7553

CVE-2024-7553 concerns MongoDB components (Server and relevant drivers) on Windows, due to incorrect validation of files loaded from a local untrusted directory. The flaw can enable local privilege escalation and may cause the application to execute arbitrary behavior based on untrusted file cont...

CVE-2023-0437

The CVE-2023-0437 issue affects the MongoDB C Driver: all versions prior to 1.25.0 are vulnerable due to a loop in bson_utf8_validate that may exit never, potentially causing an infinite loop. This is supported by multiple sources in connected data (MongoDB advisory, Debian/LTS entries, and distr...

CVE-2020-12135

CVE-2020-12135 affects the BSON library prior to 0.8, where many variables and return values use int instead of size_t. The root cause is an integer overflow in bson_ensure_space() when processing crafted input, potentially exploiting bytesNeeded. Public disclosures in multiple advisories (NVD, O...

CVE-2026-4359

MongoDB C driver is affected by CVE-2026-4359: a compromised cloud server or MITM can send a malformed HTTP response that causes a crash in applications using the driver. Affected component: the MongoDB C driver’s HTTP response handling. Root cause: malformed HTTP response handling leading to a c...

CVE-2026-6231

The CVE-2026-6231 issue affects the MongoDB C Driver. The root cause is that the bson_validate function may return early on certain inputs and incorrectly report success, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. Affected products/versions ex...

CVE-2025-12119

CVE-2025-12119 affects the MongoDB C driver: when using a bulk operation, mongoc_bulk_operation_t may read invalid memory if large options are passed. Connected advisories confirm the issue in the mongo-c-driver and reference Debian’s fix in version 1.17.6-1+deb11u2 for bullseye. Other listings (...

CVE-2026-6691

CVE-2026-6691 affects the MongoDB C Driver Cyrus SASL integration. The issue is unsafe string copying during username canonicalization, leading to a heap buffer overflow before any authentication or network traffic. The vulnerability can be triggered by untrusted input in the username of a MongoD...

CVE-2026-88036

The GridFS component of the MongoDB C Driver is vulnerable to query-operator injection in file identifiers. A caller-supplied structured file ID can be interpreted as a query condition rather than a literal identifier, allowing an authenticated user who can influence the identifier to either read...

CVE-2026-9100

The MongoDB C Driver is vulnerable because its legacy GridFS API fails to perform adequate validation on file metadata received from the database. An attacker can use crafted documents within a GridFS collection to trigger a division-by-zero error, causing the application to crash, or an out-of-b...

CVE-2026-93393

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend . While processing incoming encrypted traffic, an oversized decrypted TLS record sequence can cause the driver to write attacker-supplied data outside a heap all...

CVE-2026-81524

MongoDB C Driver is vulnerable to cross-tenant database retargeting caused by dot and NUL injection in namespace strings. Special characters in caller-supplied database and collection name components pass without sanitization when the driver composes the target namespace, allowing an application ...

CVE-2026-84963

CVE-2026-84963 affects the JSON-to-BSON parser in the MongoDB C Driver's BSON library . The root cause is an unchecked int cast of huge JSON string values, causing an incorrect numeric conversion that silently shortens unusually large text values or omits the corresponding field entirely—while th...

CVE-2026-84964

CVE-2026-84964 is a double free vulnerability in the MongoDB C Driver , specifically in its OpenSSL-based TLS certificate revocation checking path . During a TLS handshake, specially formed certificate data from a crafted multi-URL certificate can cause the same heap object to be released twice. ...

CVE-2026-84969

CVE-2026-84969 is a heap buffer overflow in the BSON-to-JSON conversion helpers of the MongoDB C Driver . The root cause is a truncated Base64 encoding of a binary field when the output is cut short at a caller-configured length limit, causing a small number of bytes to be written past the end of...

CVE-2026-88035

CVE-2026-88035 is a heap buffer overflow in the MongoDB C Driver 's client-side authentication path, triggered during SASL username canonicalization . A size-check integer wrap-around allows an unusually large username to be copied past the end of a small buffer, causing the embedding application...

CVE-2026-84965

CVE-2026-84965 affects the BSON library within the MongoDB C Driver (tracked as CDRIVER-6405 ). An integer wraparound in an allocation size calculation during JSON parsing can cause a buffer to be freed while a subsequent copy still writes through the stale pointer (use-after-free). This is explo...

CVE-2026-93395

CVE-2026-93395 is an integer underflow in the bson_new_from_buffer() function of libbson (the MongoDB C driver's BSON library). The function reads a 32-bit document length from input but fails to verify it is at least 5 (the minimum valid BSON document size). When the length field is zero , the e...

CVE-2026-93394

libmongoc (MongoDB C driver) contains a flaw in its SCRAM authentication implementation where the client continues the handshake and transmits the client proof even after detecting a nonce mismatch in the server's first message. An attacker with a man-in-the-middle position can inject a crafted s...