Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-0437

MongoDB client C Driver may infinitely loop when validating certain BSON input data

Description

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc MongoDB C Driver

Default version status: unaffected

  • 1.0.0 to < 1.25.0affected

References