Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2024-6381

MongoDB C Driver bson_strfreev may be susceptible to integer overflow

Description

The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc libbson

Default version status: unaffected

  • 0 to < 1.26.2affected

References