Description
An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MongoDB | PyMongo | ≤ 4.6.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | pymongo | 4.7.3-1 | — |
| Debian 13 | pymongo | 4.7.3-1 | — |
| Debian 12 | pymongo | 3.11.0-1+deb12u1 | — |
| Debian 11 | pymongo | 3.11.0-1+deb11u1 | DLA-3889-1 |
| Debian 10 | pymongo | 3.7.1-1.1+deb10u1 | DLA-3832-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | pymongo | 3.11.0-1ubuntu0.24.04.1 | USN-6904-1 |
| Ubuntu 22.04 LTS | pymongo | 3.11.0-1ubuntu0.22.04.1 | USN-6904-1 |
| Ubuntu 20.04 LTS | pymongo | 3.10.1-0ubuntu2.1 | USN-6904-1 |
| Ubuntu 14.04 LTS | pymongo | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | pymongo | 3.6.1+dfsg1-1ubuntu0.1~esm1 | USN-6904-1 |
| Ubuntu Pro 16.04 LTS | pymongo | 3.2-1ubuntu0.1~esm1 | USN-6904-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | python-PyMySQL +1 | 0.10.1-2.module+el8.10.0+20784+edafcd43 | RHSA-2025:8419 |
| RHEL 8 | python-distro +1 | 1.4.0-2.module+el8.10.0+20784+edafcd43 | RHSA-2025:8419 |
| RHEL 8 | python-docs +1 | 3.6.7-2.module+el8.10.0+20784+edafcd43 | RHSA-2025:8419 |
| RHEL 8 | python-docutils +1 | 0.14-12.module+el8.10.0+20784+edafcd43 | RHSA-2025:8419 |
| RHEL 8 | python-nose +2 | 1.3.7-31.module+el8.10.0+20784+edafcd43 | RHSA-2025:8419 |
| RHEL 8 | python-pygments +1 | 2.2.0-22.module+el8.10.0+20784+edafcd43 | RHSA-2025:8419 |
| RHEL 8 | python-sqlalchemy +2 | 1.3.2-3.module+el8.10.0+20981+3704b446 | RHSA-2025:8419 |
| RHEL 8 | python-virtualenv +2 | 15.1.0-23.module+el8.10.0+22619+61b70790 | RHSA-2025:8419 |
| RHEL 8 | python-wheel +2 | 1:0.31.1-3.module+el8.10.0+20784+edafcd43 | RHSA-2025:8419 |
| RHEL 8 | python3-bson +4 | 3.7.0-2.module+el8.10.0+23071+07f1d18e | RHSA-2025:8419 |
| RHEL 8 | python36 +3 | 3.6.8-39.module+el8.10.0+20784+edafcd43 | RHSA-2025:8419 |
| RHEL 8 | scipy +1 | 1.0.0-21.module+el8.10.0+20784+edafcd43 | RHSA-2025:8419 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | python3-PyMySQL | 0.10.1-2.module_el8.9.0+3700+efebe9fd | ALSA-2025:8419 |
| AlmaLinux 8 | python3-bson +3 | 3.7.0-2.module_el8.10.0+3998+2cf36268 | ALSA-2025:8419 |
| AlmaLinux 8 | python3-distro | 1.4.0-2.module_el8.9.0+3700+efebe9fd | ALSA-2025:8419 |
| AlmaLinux 8 | python3-docs | 3.6.7-2.module_el8.9.0+3700+efebe9fd | ALSA-2025:8419 |
| AlmaLinux 8 | python3-docutils | 0.14-12.module_el8.9.0+3700+efebe9fd | ALSA-2025:8419 |
| AlmaLinux 8 | python3-nose +1 | 1.3.7-31.module_el8.9.0+3700+efebe9fd | ALSA-2025:8419 |
| AlmaLinux 8 | python3-pygments | 2.2.0-22.module_el8.9.0+3700+efebe9fd | ALSA-2025:8419 |
| AlmaLinux 8 | python3-scipy | 1.0.0-21.module_el8.9.0+3700+efebe9fd | ALSA-2025:8419 |
| AlmaLinux 8 | python3-sqlalchemy +1 | 1.3.2-3.module_el8.10.0+3769+3838165b | ALSA-2025:8419 |
| AlmaLinux 8 | python3-virtualenv +1 | 15.1.0-23.module_el8.10.0+3937+b6a3652f | ALSA-2025:8419 |
| AlmaLinux 8 | python3-wheel +1 | 1:0.31.1-3.module_el8.9.0+3700+efebe9fd | ALSA-2025:8419 |
| AlmaLinux 8 | python36 +3 | 3.6.8-39.module_el8.10.0+3769+3838165b | ALSA-2025:8419 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | python-PyMySQL | 0.10.1-2.module+el8.10.0+1582+bc278001 | RLSA-2025:8419 |
| Rocky Linux 8 | python-distro | 1.4.0-2.module+el8.10.0+1592+61442852 | RLSA-2025:8419 |
| Rocky Linux 8 | python-docs | 3.6.7-2.module+el8.10.0+1592+61442852 | RLSA-2025:8419 |
| Rocky Linux 8 | python-docutils | 0.14-12.module+el8.9.0+1531+a18208f5 | RLSA-2025:8419 |
| Rocky Linux 8 | python-nose | 1.3.7-31.module+el8.9.0+1531+a18208f5 | RLSA-2025:8419 |
| Rocky Linux 8 | python-pygments | 2.2.0-22.module+el8.9.0+1531+a18208f5 | RLSA-2025:8419 |
| Rocky Linux 8 | python-pymongo | 3.7.0-2.module+el8.10.0+1986+6cb2ea52 | RLSA-2025:8419 |
| Rocky Linux 8 | python-sqlalchemy | 1.3.2-3.module+el8.10.0+1602+b47e27fa | RLSA-2025:8419 |
| Rocky Linux 8 | python-virtualenv | 15.1.0-23.module+el8.10.0+1910+234ad790 | RLSA-2025:8419 |
| Rocky Linux 8 | python-wheel | 1:0.31.1-3.module+el8.9.0+1531+a18208f5 | RLSA-2025:8419 |
| Rocky Linux 8 | python36 | 3.6.8-39.module+el8.10.0+1592+61442852 | RLSA-2025:8419 |
| Rocky Linux 8 | scipy | 1.0.0-21.module+el8.10.0+1592+61442852 | RLSA-2025:8419 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | python3-bson +3 | 3.10.1-5.amzn2023.0.3 | ALAS2023-2024-614 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | python-pymongo | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | python-pymongo | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | python3-PyMySQL | 0.10.1-2.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
| Oracle Linux 8 | python3-bson +3 | 3.7.0-2.module+el8.10.0+90599+fd4ba14b | ELSA-2025-8419 |
| Oracle Linux 8 | python3-distro | 1.4.0-2.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
| Oracle Linux 8 | python3-docs | 3.6.7-2.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
| Oracle Linux 8 | python3-docutils | 0.14-12.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
| Oracle Linux 8 | python3-nose +1 | 1.3.7-31.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
| Oracle Linux 8 | python3-pygments | 2.2.0-22.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
| Oracle Linux 8 | python3-scipy | 1.0.0-21.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
| Oracle Linux 8 | python3-sqlalchemy +1 | 1.3.2-3.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
| Oracle Linux 8 | python3-virtualenv +1 | 15.1.0-23.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
| Oracle Linux 8 | python3-wheel +1 | 1:0.31.1-3.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
| Oracle Linux 8 | python36 +3 | 3.6.8-39.module+el8.10.0+90473+c30184f9 | ELSA-2025-8419 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | kubeflow-pipelines-visualization-server | 2.2.0-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pymongo | < 4.6.3 | 4.6.3 | GHSA-m87m-mmvp-v9qm |
Advisories 9
- ALSA-2025:8419 Low: python36:3.6 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:8419 Red Hat Security Advisory: python36:3.6 security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- USN-6904-1 pymongo vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026
- DLA-3832-1 pymongo - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3889-1 pymongo - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2025:8419 Low: python36:3.6 security update Rocky Linux Security Advisories · Jul 29, 2025
- WID-SEC-2025-1217 Red Hat Enterprise Linux pymongo: Schwachstelle ermöglicht Denial of Service und Offenlegung BSI CERT-Bund (WID) · Jun 3, 2025
- ELSA-2025-8419 Low: python36:3.6 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jun 3, 2025
- ALAS2023-2024-614 Moderate: python-pymongo security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 26, 2025