SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-84969

LOW · CVSS 3.7 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The MongoDB C Driver is vulnerable due to a memory-handling error in its BSON-to-JSON conversion, which can lead to a buffer overflow when encoding binary fields with a specified length limit. This flaw allows an unprivileged attacker to potentially alter a small amount of data outside the intended buffer, posing a risk of data corruption. Organizations using the MongoDB C Driver should prioritize addressing this vulnerability to mitigate potential integrity issues in their applications.

CVE
CVE-2026-84969
Severity
LOW
CVSS
3.7
EPSS
0.17%
MongoDB

Original NVD Description

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.

Related CVEs

Other vulnerabilities affecting the same vendor(s)