{"kind": "product", "path": "vulns/debian-13/mongo-c-driver", "name": "mongo-c-driver", "product": "mongo-c-driver", "ecosystem": "Debian:13", "items": [{"id": "CVE-2026-106438", "noindex": false, "published": "2026-10-08T18:44:05.629Z", "modified": "2026-10-08T19:21:43.595Z", "cvss": 5.1, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00108, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-106438", "title": "Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver", "description": "An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application, including through Extended JSON parsing, can cause the application to store or use an incorrect numeric value.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6419", "https://nvd.nist.gov/vuln/detail/CVE-2026-106438"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-106437", "noindex": false, "published": "2026-10-08T18:42:14.552Z", "modified": "2026-10-08T19:20:23.562Z", "cvss": 5.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00097, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-106437", "title": "Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver", "description": "The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an embedding application can cause the application to terminate or read or corrupt adjacent process memory. Reaching this issue requires the application to pass an undersized value to bson_reserve_buffer and then perform an affected operation.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6423", "https://nvd.nist.gov/vuln/detail/CVE-2026-106437"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-106431", "noindex": false, "published": "2026-10-08T18:40:32.206Z", "modified": "2026-10-08T19:19:51.552Z", "cvss": 5.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00097, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-106431", "title": "One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver", "description": "An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent process memory or terminate the process. Reaching this issue requires the application to use the BSON bulk-writer API and produce a precise cumulative document size.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6418", "https://nvd.nist.gov/vuln/detail/CVE-2026-106431"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-106428", "noindex": false, "published": "2026-10-08T18:35:02.300Z", "modified": "2026-10-08T19:17:15.607Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00238, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-106428", "title": "Out-of-bounds read in SCRAM response parsing in MongoDB C Driver", "description": "An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the application using the driver to terminate. The extra byte is not returned through the protocol.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6370", "https://nvd.nist.gov/vuln/detail/CVE-2026-106428"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-96746", "noindex": false, "published": "2026-09-24T15:51:15.196Z", "modified": "2026-09-24T18:18:08.886Z", "cvss": 8.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00366, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-96746", "title": "Heap buffer overflow via mid-scan command list growth in client topology monitoring", "description": "An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the driver to terminate unexpectedly.", "references": ["https://github.com/mongodb/mongo-c-driver/security/advisories/GHSA-frjf-h5jg-4v46", "https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.12", "https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.5"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-93395", "noindex": false, "published": "2026-09-17T20:34:57.703Z", "modified": "2026-09-18T14:31:41.359Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00402, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93395", "title": "Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()", "description": "A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 (the minimum valid BSON document size) before using it in an array index calculation. When the length field is zero, the expression used to check the document's null terminator wraps to UINT32_MAX, causing a heap out-of-bounds read that crashes the process. An unauthorized party who can supply crafted BSON input to an application using this API can cause a denial of se", "references": ["https://jira.mongodb.org/browse/CDRIVER-6343", "https://nvd.nist.gov/vuln/detail/CVE-2026-93395"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-93394", "noindex": false, "published": "2026-09-17T20:31:27.875Z", "modified": "2026-09-18T14:31:41.209Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00321, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93394", "title": "libmongoc SCRAM client nonce-validation bypass", "description": "A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by injecting a crafted server-first-message containing a controlled salt and low iteration count, then capturing the resulting client proof to perform offline password cracking. This vulnerability is mitigated by TLS, which is standard in production deployments.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6315", "https://nvd.nist.gov/vuln/detail/CVE-2026-93394"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-93393", "noindex": false, "published": "2026-09-17T20:26:38.911Z", "modified": "2026-09-18T17:35:11.797Z", "cvss": 9.2, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "critical", "epss": 0.00468, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93393", "title": "Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream", "description": "A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming encrypted traffic after the TLS handshake completes. No authentication or user interaction is required, because the affected processing occurs before any application-level authentication completes. Triggering this issue may lead to memory corruption in the client process, disclosure of adjacent heap memory, or termination of the process.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6417", "https://nvd.nist.gov/vuln/detail/CVE-2026-93393"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-88036", "noindex": false, "published": "2026-09-10T18:09:10.536Z", "modified": "2026-09-10T18:29:27.944Z", "cvss": 6.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00265, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-88036", "title": "GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver", "description": "Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6427", "https://nvd.nist.gov/vuln/detail/CVE-2026-88036"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-88035", "noindex": false, "published": "2026-09-10T18:07:10.823Z", "modified": "2026-09-10T18:29:53.256Z", "cvss": 5.7, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00103, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-88035", "title": "Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver", "description": "A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to terminate unexpectedly. Reaching this code requires a build in which the optional external SASL authentication backend is present and a connection configured to use it.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6416", "https://nvd.nist.gov/vuln/detail/CVE-2026-88035"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-84963", "noindex": false, "published": "2026-09-03T15:03:13.274Z", "modified": "2026-09-03T15:35:27.926Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.0031, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-84963", "title": "Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser", "description": "An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticated party who can supply the input processed by an application that uses this component may cause that application to hold data that does not match what was submitted, which may result in unintended alteration of data.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6407", "https://nvd.nist.gov/vuln/detail/CVE-2026-84963"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-84964", "noindex": false, "published": "2026-09-03T15:02:20.836Z", "modified": "2026-09-03T15:42:32.343Z", "cvss": 8.2, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00257, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-84964", "title": "Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client", "description": "A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6409", "https://nvd.nist.gov/vuln/detail/CVE-2026-84964"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-84965", "noindex": false, "published": "2026-09-03T15:01:21.882Z", "modified": "2026-09-03T15:44:49.921Z", "cvss": 5.9, "cvss_vector": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00125, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-84965", "title": "Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds", "description": "An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6405", "https://nvd.nist.gov/vuln/detail/CVE-2026-84965"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-84969", "noindex": false, "published": "2026-09-03T14:59:01.427Z", "modified": "2026-09-03T15:08:11.873Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00271, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-84969", "title": "Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output", "description": "A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6410", "https://nvd.nist.gov/vuln/detail/CVE-2026-84969"], "fixes": [], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-81524", "noindex": false, "published": "2026-08-27T18:32:25.355Z", "modified": "2026-08-28T15:50:10.011Z", "cvss": 5.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00267, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-81524", "title": "Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver", "description": "A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6424", "https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-81524"], "fixes": ["1.30.4-1+deb13u3"], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-9100", "noindex": false, "published": "2026-05-20T15:55:13.154Z", "modified": "2026-05-20T17:20:32.902Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00301, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-9100", "title": "Heap memory out of bounds read and crash in C Driver legacy GridFS file reader", "description": "The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).", "references": ["https://jira.mongodb.org/browse/CDRIVER-6281", "https://nvd.nist.gov/vuln/detail/CVE-2026-9100"], "fixes": ["1.30.4-1+deb13u2"], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-6691", "noindex": false, "published": "2026-05-06T15:08:23.671Z", "modified": "2026-05-07T03:55:47.410Z", "cvss": 8.6, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00184, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-6691", "title": "MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow", "description": "The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6134", "https://nvd.nist.gov/vuln/detail/CVE-2026-6691"], "fixes": ["1.30.4-1+deb13u2"], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-6231", "noindex": false, "published": "2026-04-13T15:31:55.735Z", "modified": "2026-04-13T19:23:42.752Z", "cvss": 5.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00316, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-6231", "title": "bson_validate may skip validation when processing certain inputs", "description": "The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that rely on these functions to validate untrusted BSON data before further processing. This issue affects MongoDB C Driver versions prior to 1.30.5, MongoDB C Driver version 2.0.0 and MongoDB C Driver version 2.0.1", "references": ["https://jira.mongodb.org/browse/CDRIVER-6017", "https://nvd.nist.gov/vuln/detail/CVE-2026-6231"], "fixes": ["1.30.4-1+deb13u2"], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-4359", "noindex": false, "published": "2026-03-17T19:42:03.476Z", "modified": "2026-03-18T20:00:06.747Z", "cvss": 2, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "low", "epss": 0.00247, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-4359", "title": "Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer", "description": "A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6251", "https://nvd.nist.gov/vuln/detail/CVE-2026-4359"], "fixes": ["1.30.4-1+deb13u2"], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}, {"id": "CVE-2025-14911", "noindex": false, "published": "2026-01-27T17:29:21.423Z", "modified": "2026-02-26T21:36:11.900Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.0033, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-14911", "title": "Integer Overflow in GridFS chunkSize Leading to Heap Allocation Failure", "description": "User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6125", "https://nvd.nist.gov/vuln/detail/CVE-2025-14911"], "fixes": ["1.30.4-1+deb13u2"], "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}]}], "total": 27, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "mongo-c-driver", "path": "vulns/debian-13/mongo-c-driver", "ecosystem": "Debian:13"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 4, "kev": 0}, "lastmod": "2026-10-08T19:21:43.595Z", "early_advisories": [], "license": "Vous pouvez librement utiliser la sélection de PatchFirst et nos ajouts (priorités, alertes précoces, textes, synthèses et agrégats) pour vos propres besoins, y compris les activités internes de votre entreprise. La revente, la distribution commerciale et la mise en miroir massive de cette sélection ou de ces ajouts nécessitent un accord écrit avec l’opérateur. Lors de toute utilisation ou publication de la sélection ou de nos ajouts, citez PatchFirst (https://patchfirst.dev/vulns/) avec ce lien vers la page du flux de votre région. Les enregistrements originaux des sources ouvertes restent soumis à leurs licences et conditions respectives. Ces conditions ne limitent pas vos droits sur les données originales, que vous pouvez obtenir directement auprès de ces sources.", "terms_url": "https://patchfirst.dev/fr/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst sélectionne, normalise et combine les enregistrements ; des synthèses et des traductions peuvent être ajoutées. Les actualités sont accompagnées d’un lien vers la source originale dans chaque entrée.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Les licences des bases d’origine varient ; voir le catalogue des sources."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Évaluations publiques gratuites ; mention de la source demandée (FIRST EPSS, évaluations produites par Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}