Skip to contentMongodb Inc. C Driver vulnerabilities
- mongodb c driverSilent element-count truncation via 32-bit bit-length overflow in packed-bit vector viewsCVE-2026-120954Fix available6.3 Medium
- mongodb c driverMongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS MetadataCVE-2026-120955Fix available8.7 High
- mongodb c driverremote abort and memory disclosure from a malformed cursor.nsCVE-2026-120956Fix available7.1 High
- mongodb c driverMongoDB C Driver GridFS gap lets a shared writer recover a protected client's passwordCVE-2026-120684Fix available6.0 Medium
- mongodb c driverMongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)CVE-2026-120678Fix available8.7 High
- mongodb c driverHeap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrappingCVE-2026-114645Fix available5.7 Medium
- mongodb c driverSilent Decimal128 value corruption via incorrect exactness check in MongoDB C DriverCVE-2026-106438Fix available5.1 Medium
- mongodb c driverOut-of-bounds read and write via undersized BSON buffer reservation in MongoDB C DriverCVE-2026-106437Fix available5.9 Medium
- mongodb c driverOne-byte heap buffer overflow in BSON bulk document writer in MongoDB C DriverCVE-2026-106431Fix available5.9 Medium
- mongodb c driverOut-of-bounds read in SCRAM response parsing in MongoDB C DriverCVE-2026-106428Fix available6.3 Medium
- mongodb c driverHeap buffer overflow via mid-scan command list growth in client topology monitoringCVE-2026-96746Fix available8.3 High
- mongodb c driverInteger Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()CVE-2026-93395Fix available6.9 Medium
- mongodb c driverlibmongoc SCRAM client nonce-validation bypassCVE-2026-93394Fix available6.3 Medium
- mongodb c driverHeap overflow via oversized decrypted TLS record sequence in Windows Secure Channel streamCVE-2026-93393Fix available9.2 Critical
- mongodb c driverGridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C DriverCVE-2026-88036Fix available6.1 Medium
- mongodb c driverHeap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C DriverCVE-2026-88035Fix available5.7 Medium
- mongodb c driverSilent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parserCVE-2026-84963Fix available6.3 Medium
- mongodb c driverHeap corruption via OCSP request double free from crafted multi-URL certificate in TLS clientCVE-2026-84964Fix available8.2 High
- mongodb c driverHeap write primitive via size round-up wrap during JSON parsing on 32-bit buildsCVE-2026-84965Fix available5.9 Medium
- mongodb c driverHeap overflow via truncated base64 encoding of binary fields in length-limited JSON outputCVE-2026-84969Fix available6.3 Medium
- mongodb c driverCross-tenant database retargeting via dot/NUL injection in namespace strings in the C DriverCVE-2026-81524Fix available5.3 Medium
- mongodb c driverHeap memory out of bounds read and crash in C Driver legacy GridFS file readerCVE-2026-9100Fix available6.0 Medium
- mongodb c driverMongoDB C Driver Cyrus SASL Canonicalization Buffer OverflowCVE-2026-6691Fix available8.6 High
- mongodb c driverbson_validate may skip validation when processing certain inputsCVE-2026-6231Fix available5.3 Medium
- mongodb c driverHeap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated bufferCVE-2026-4359Fix available2.0 Low
- mongodb c driver, php driver +1 moreBulk write with options may read invalid memoryCVE-2025-12119Fix available6.9 Medium
- mongodb c driver, mongodb, mongodb php driver +2 more +4 moreAccessing Untrusted Directory May Allow Local Privilege EscalationCVE-2024-7553Fix available7.3 High
- mongodb c driverMongoDB client C Driver may infinitely loop when validating certain BSON input dataCVE-2023-0437Fix available5.3 Medium
- mongodb c driver, node.js, php driver +4 more +6 moreSome MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an applicationCVE-2021-32050Fix available4.2 Medium