Skip to content
OpenAdvisories

Product · MongoDB

Libmongocrypt Driver

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-126792

    Heap overflow via oversized RSA signature in GCP KMS signing callback

    A memory-safety flaw in the key-management request-building component of the library can lead to an out-of-bounds write on the heap. A fixed-size output buffer is used under an assumption about cryptographic key size that is never validated, so when the libra…

    MongoDB Libmongocrypt Driver