Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:*:*:*

2 briefs RSS
medium advisory

MongoDB C Driver: Out-of-bounds heap memory disclosure (CVE-2026-120956)

The MongoDB C Driver fails to validate server-provided namespace fields, allowing an unauthenticated malicious MongoDB endpoint to trigger a process crash or cause the driver to disclose uninitialized heap memory.

C Driver
2t 1c
low advisory

MongoDB C Driver: GridFS file download API denial of service (CVE-2026-120955)

The MongoDB C Driver fails to validate internal operation results within the GridFS file download API, allowing an attacker to trigger a process crash and service unavailability.

MongoDB C Driver denial-of-service memory-leak mongodb
1t 2c