Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-96746 EUVD-2026-86263

Heap buffer overflow via mid-scan command list growth in client topology monitoring

Published Sep 24, 2026 · Updated Sep 24, 2026 · Assigned by mongodb

Description

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the driver to terminate unexpectedly.

Affected products

VendorProductAffectedFixed
MongoDB C Driver < 1.30.12, 2.0.0 – < 2.5.5 1.30.12

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 mongo-c-driver 2.5.5-1 —
Debian 13 mongo-c-driver No fix yet —
Debian 12 mongo-c-driver No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 pymongo No fix yet —
Ubuntu 26.04 LTS pymongo No fix yet —
Ubuntu 24.04 LTS pymongo No fix yet —
Ubuntu 22.04 LTS pymongo No fix yet —
Ubuntu 20.04 LTS pymongo No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS pymongo No fix yet —
Ubuntu Pro 18.04 LTS pymongo No fix yet —
Ubuntu Pro 16.04 LTS pymongo No fix yet —

Advisories 1

References