CyberRota Analysis
AI-GeneratedThe MongoDB PHP driver is vulnerable to an out-of-bounds read that can be exploited by unauthenticated users through specially crafted input, potentially leading to the disclosure of limited adjacent process memory in error messages. This vulnerability poses a medium risk as it may expose sensitive information, albeit in small amounts. Organizations using the MongoDB PHP driver should prioritize addressing this issue to mitigate the risk of unintended data leaks.
Original NVD Description
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended disclosure of limited memory contents.
Related CVEs
Other vulnerabilities affecting the same vendor(s)