p PatchFirst

CVE-2026-106435

CVE-2026-106435 · Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode_all API can cause the application process to terminate when the C extension is loaded. The driver's normal database wire-protocol path does not reach this code.

CVSS 5.9 · Medium · EPSS 0.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • python driver

    Versions
    • ≥ 0.10.3, ≤ 4.18.2: Affected (semver)

    No fix published

  • pymongo Debian:12

    Versions
    • 3.11.0-1
    • 3.11.0-1+deb12u1
    • 4.10.1-1
    • 4.10.1-2
    • 4.10.1-3
    • 4.10.1-4
    • 4.10.1-5
    • 4.10.1-6
    • 4.15.3-1
    • 4.15.3-2
    • 4.15.4-1
    • 4.15.4-2
    • 4.15.5-1
    • 4.16.0-1
    • 4.17.0-1
    • 4.18.1-1
    • 4.18.2-1
    • 4.19.0-1
    • 4.7.3-1
    • 4.7.3-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pymongo Debian:13

    Versions
    • 4.10.1-6
    • 4.15.3-1
    • 4.15.3-2
    • 4.15.4-1
    • 4.15.4-2
    • 4.15.5-1
    • 4.16.0-1
    • 4.17.0-1
    • 4.18.1-1
    • 4.18.2-1
    • 4.19.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pymongo Debian:14

    Versions
    • 4.10.1-6
    • 4.15.3-1
    • 4.15.3-2
    • 4.15.4-1
    • 4.15.4-2
    • 4.15.5-1
    • 4.16.0-1
    • 4.17.0-1
    • 4.18.1-1
    • 4.18.2-1
    Affected ranges
    • ECOSYSTEM: < 4.19.0-1

    Update to 4.19.0-1

  • pymongo Ubuntu:14.04:LTS

    Versions
    • 2.6-1
    • 2.6.2-1
    • 2.6.3-1
    • 2.6.3-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pymongo Ubuntu:Pro:16.04:LTS

    Versions
    • 3.0.3-1
    • 3.2-1
    • 3.2-1build1
    • 3.2-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pymongo Ubuntu:Pro:18.04:LTS

    Versions
    • 3.4.0-1build2
    • 3.6.1+dfsg1-1
    • 3.6.1+dfsg1-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pymongo Ubuntu:20.04:LTS

    Versions
    • 3.7.1-1.1
    • 3.7.1-1.1build1
    • 3.10.1-0ubuntu2
    • 3.10.1-0ubuntu2.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pymongo Ubuntu:22.04:LTS

    Versions
    • 3.11.0-1build2
    • 3.11.0-1build3
    • 3.11.0-1build4
    • 3.11.0-1ubuntu0.22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pymongo Ubuntu:24.04:LTS

    Versions
    • 3.11.0-1build6
    • 3.11.0-1build7
    • 3.11.0-1build8
    • 3.11.0-1ubuntu0.24.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pymongo Ubuntu:26.10

    Versions
    • 4.16.0-1build1
    • 4.17.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pymongo Ubuntu:26.04:LTS

    Versions
    • 4.10.1-6
    • 4.15.3-1
    • 4.15.3-2
    • 4.15.5-1
    • 4.16.0-1
    • 4.16.0-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →