Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-0529

Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
elastic

Description

Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buffers (CAPEC-100) through specially crafted network traffic. This requires an attacker to send a malformed payload to a monitored network interface where MongoDB protocol parsing is enabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Packetbeat

Default version status: unaffected

  • 7.0.0 to ≤ 7.17.29affected
  • 8.0.0 to ≤ 8.19.9affected
  • 9.0.0 to ≤ 9.1.9affected
  • 9.2.0 to ≤ 9.2.3affected

References