https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:38:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-371859 EUVD-2026-371859 https://cve.radiocsirt.org/vuln/euvd-2026-371859 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93395 <p>A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 (the minimum valid BSON document size) before using it in an array index calculation. When the length field is zero, the expression used to check the document&#39;s null terminator wraps to UINT32_MAX, causing a heap out-of-bounds read that crashes the process. An unauthorized party who can supply crafted BSON input to an application using this API can cause a denial of service.</p> <p>A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 (the minimum valid BSON document size) before using it in an array index calculation. When the length field is zero, the expression used to check the document&#39;s null terminator wraps to UINT32_MAX, causing a heap out-of-bounds read that crashes the process. An unauthorized party who can supply crafted BSON input to an application using this API can cause a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-93395 https://cve.radiocsirt.org/vuln/ghsa-jm9m-v7jc-m4j8 <p>A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 (the minimum valid BSON document size) before using it in an array index calculation. When the length field is zero, the expression used to check the document&#39;s null terminator wraps to UINT32_MAX, causing a heap out-of-bounds read that crashes the process. An unauthorized party who can supply crafted BSON input to an application using this API can cause a denial of service.</p> <p>A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 (the minimum valid BSON document size) before using it in an array index calculation. When the length field is zero, the expression used to check the document&#39;s null terminator wraps to UINT32_MAX, causing a heap out-of-bounds read that crashes the process. An unauthorized party who can supply crafted BSON input to an application using this API can cause a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-jm9m-v7jc-m4j8 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-93395 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: mongo-c-driver, Ubuntu:Pro:22.04:LTS: mongo-c-driver, Ubuntu:Pro:24.04:LTS: mongo-c-driver, Ubuntu:26.04:LTS: mongo-c-driver</p> <p>A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 (the minimum valid BSON document size) before using it in an array index calculation. When the length field is zero, the expression used to check the document&#39;s null terminator wraps to UINT32_MAX, causing a heap out-of-bounds read that crashes the process. An unauthorized party who can supply crafted BSON input to an application using this API can cause a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: mongo-c-driver, Ubuntu:Pro:22.04:LTS: mongo-c-driver, Ubuntu:Pro:24.04:LTS: mongo-c-driver, Ubuntu:26.04:LTS: mongo-c-driver</p> <p>A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5 (the minimum valid BSON document size) before using it in an array index calculation. When the length field is zero, the expression used to check the document&#39;s null terminator wraps to UINT32_MAX, causing a heap out-of-bounds read that crashes the process. An unauthorized party who can supply crafted BSON input to an application using this API can cause a denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-93395 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3453 <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Informationen offenzulegen oder um einen Denial-of-Service-Zustand herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Informationen offenzulegen oder um einen Denial-of-Service-Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3453