Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27114
HistorySep 21, 2020 - 6:36 a.m.

Integer Overflows

2020-09-2106:36:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

0.001 Low

EPSS

Percentile

48.7%

bson is vulnerable to Integer Overflows. It incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.