← Back

CVE-2026-4147

nvd nist
Published: Mar 17, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: CNA (Secondary)

Description

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.

Affected (8)

Products: Mongodb: Mongodb
Mongodb
1 product
Mongodb
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Mongodb
Mongodb
From 7.0.0 to 7.0.31
Mongodb
From 8.0.0 to 8.0.20
Mongodb
From 8.2.0 to 8.2.6
Mongodb
Version 8.3.0 alpha0
Mongodb
Version 8.3.0 alpha1
Mongodb
Version 8.3.0 alpha2
Mongodb
Version 8.3.0 alpha3
Mongodb
Version 8.3.0 rc1

Related CWEs

CWE-457
Use of Uninitialized Variable
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.
CWE-908
Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.

References (1)

Source: cna@mongodb.com
PatchVendor Advisory

Timeline

No history available yet.