https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 13:18:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-384759 EUVD-2026-384759 https://cve.radiocsirt.org/vuln/euvd-2026-384759 https://cve.radiocsirt.org/vuln/fkie_cve-2026-106437 <p>The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an embedding application can cause the application to terminate or read or corrupt adjacent process memory. Reaching this issue requires the application to pass an undersized value to bson_reserve_buffer and then perform an affected operation.</p> <p>The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an embedding application can cause the application to terminate or read or corrupt adjacent process memory. Reaching this issue requires the application to pass an undersized value to bson_reserve_buffer and then perform an affected operation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-106437 https://cve.radiocsirt.org/vuln/oesa-2026-4443 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: mongo-c-driver</p> <p>mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fix(es):</p> <p>An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the application using the driver to terminate. The extra byte is not returned through the protocol.(CVE-2026-106428)</p> <p>An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent process memory or terminate the process. Reaching this issue requires the application to use the BSON bulk-writer API and produce a precise cumulative document size.(CVE-2026-106431)</p> <p>The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an embedding application can cause the application to terminate or read or c…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: mongo-c-driver</p> <p>mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fix(es):</p> <p>An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the application using the driver to terminate. The extra byte is not returned through the protocol.(CVE-2026-106428)</p> <p>An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent process memory or terminate the process. Reaching this issue requires the application to use the BSON bulk-writer API and produce a precise cumulative document size.(CVE-2026-106431)</p> <p>The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an embedding application can cause the application to terminate or read or c…</p> https://cve.radiocsirt.org/vuln/oesa-2026-4443 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-106437 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: mongo-c-driver, Ubuntu:Pro:22.04:LTS: mongo-c-driver, Ubuntu:Pro:24.04:LTS: mongo-c-driver, Ubuntu:26.10: mongo-c-driver, Ubuntu:26.04:LTS: mongo-c-driver</p> <p>The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an embedding application can cause the application to terminate or read or corrupt adjacent process memory. Reaching this issue requires the application to pass an undersized value to bson_reserve_buffer and then perform an affected operation.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: mongo-c-driver, Ubuntu:Pro:22.04:LTS: mongo-c-driver, Ubuntu:Pro:24.04:LTS: mongo-c-driver, Ubuntu:26.10: mongo-c-driver, Ubuntu:26.04:LTS: mongo-c-driver</p> <p>The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an embedding application can cause the application to terminate or read or corrupt adjacent process memory. Reaching this issue requires the application to pass an undersized value to bson_reserve_buffer and then perform an affected operation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-106437