Mongodb Php Driver vulnerabilities

• mongodb php driver Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver CVE-2026-106436 Fix available 6.3 MediumOctober 8, 2026
• mongodb php driver Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver CVE-2026-106432 Fix available 2.0 LowOctober 8, 2026
• mongodb php driver Heap out-of-bounds read via corrupt nested BSON in field path error message CVE-2026-84968 Fix available 6.9 MediumSeptember 3, 2026
• mongodb php driver, php extension, php library +2 more Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver CVE-2026-81525 Fix available 8.6 HighAugust 27, 2026
• mongodb php driver PHP Stack Exhaustion CVE-2026-6811 Fix available 6.0 MediumMay 14, 2026
• mongodb c driver, php driver +1 more Bulk write with options may read invalid memory CVE-2025-12119 Fix available 6.9 MediumNovember 18, 2025
• mongodb c driver, mongodb, mongodb php driver +2 more +4 more Accessing Untrusted Directory May Allow Local Privilege Escalation CVE-2024-7553 Fix available 7.3 HighAugust 7, 2024
• mongodb c driver, node.js, php driver +4 more +6 more Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application CVE-2021-32050 Fix available 4.2 MediumAugust 29, 2023