Medium DLA-4438-1 1 CVE

mongo-c-driver - security update

Published Jan 14, 2026 · Updated Jan 14, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	mongo-c-driver	1.17.6-1+deb11u2

Vulnerabilities 1

Medium 6.8

CVE-2025-12119

Bulk write with options may read invalid memory

A mongoc_bulk_operation_t may read invalid memory if large options are passed.

MongoDB C Driver PHP Driver mongo-c-driver Debian Ubuntu Packagist

Nov 18, 2025