Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-6383

MongoDB C Driver bson_string_append may be vulnerable to a buffer overflow

Description

The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc libbson

Default version status: unaffected

  • 0 to < 1.27.1affected

References