Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2024-5629

Out-of-bounds read in bson module of PyMongo

Description

An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc PyMongo

Default version status: unaffected

  • 0 to ≤ 4.6.2affected

References