Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-14911

Integer Overflow in GridFS chunkSize Leading to Heap Allocation Failure

Description

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Mongo-c-driver

Default version status: unaffected

  • 0 to < 2.1.3affected

References