Libbson

libbson

Vendor: Mongodb • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-0755 1Mongodb 2Libbson Mongodb Jun 17, 2026 Mar 18, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 The various bson_append functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT3...Show more The various bson_append functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16Show less
CVE-2024-6381 1Mongodb 1Libbson Jun 17, 2026 Jul 2, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affec...Show more The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2Show less
CVE-2018-16790 1Mongodb 1Libbson Nov 3, 2025 Sep 10, 2018 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 _bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.