Skip to content
OpenAdvisories
High WID-SEC-2026-3830 13 CVEs

MongoDB Treiber: Mehrere Schwachstellen

Published Oct 8, 2026 · Updated Oct 27, 2026 · Revision 4 · de-DE

Vendor: Debian Vendor: Fedora Vendor: Microsoft Product: Azure Linux Product: Linux Product: Linux Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in verschiedenen MongoDB Treibern ausnutzen, um einen Denial of Service Angriff durchzuführen und um Daten zu manipulieren.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 13

  • High 8.8
    CVE-2026-106433

    Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

    Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a se…

    MongoDB libmongocrypt libmongocrypt libmongocrypt Debian Ubuntu
  • Medium 6.5
    CVE-2026-106429

    Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt

    An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an …

    MongoDB libmongocrypt libmongocrypt libmongocrypt Debian Ubuntu
  • Medium 6.2
    CVE-2026-106437

    Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

    The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who c…

    MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu
  • Medium 5.9
    CVE-2026-106430

    Query and rename target confusion via embedded NUL truncation in MongoDB C++ Driver

    The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who c…

    MongoDB C Driver mongo-cxx-driver mongo-cxx-driver Debian Ubuntu
  • Medium 5.9
    CVE-2026-107324

    Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver

    An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may termina…

    MongoDB GO Driver telegraf cri-o Debian Ubuntu Azure Linux Wolfi
  • Medium 5.9
    CVE-2026-107325

    Application denial of service via missing BSON array length validation in MongoDB Go Driver

    Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can…

    MongoDB GO Driver telegraf cri-o Debian Ubuntu Azure Linux Wolfi
  • Medium 5.7
    CVE-2026-106431

    One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver

    An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embed…

    MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu
  • Medium 5.1
    CVE-2026-106435

    Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver

    The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode_…

    MongoDB Python Driver datadog-agent-7.80-core-integrations datadog-agent-7.79-core-integrations Debian Ubuntu Azure Linux Wolfi PyPI
  • Medium 4.8
    CVE-2026-106436

    Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

    The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually l…

    MongoDB PHP Driver php-mongodb php-mongodb Debian Ubuntu
  • Medium 4.3
    CVE-2026-106434

    Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt

    The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchanged instead of returning a decryption error. An actor who can modify stored encrypted fields, such as a database writer, server, or network intermedi…

    MongoDB libmongocrypt libmongocrypt libmongocrypt Debian Ubuntu
  • Medium 4.0
    CVE-2026-106438

    Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

    An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decim…

    MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu
  • Low 3.7
    CVE-2026-106428

    Out-of-bounds read in SCRAM response parsing in MongoDB C Driver

    An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-s…

    MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu
  • Low 3.6
    CVE-2026-106432

    Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver

    The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting h…

    MongoDB PHP Driver php-mongodb php-mongodb Debian Ubuntu

Revision history

  1. #4

    Neue Updates von Debian aufgenommen

  2. #3

    Neue Updates von Fedora aufgenommen

  3. #2

    Neue Updates aufgenommen

  4. #1

    Initiale Fassung

References