Skip to content
OpenAdvisories

Product · MongoDB

PHP Driver

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.6
    CVE-2026-106432

    Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver

    The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting h…

    MongoDB PHP Driver php-mongodb php-mongodb Debian Ubuntu