CVE-2024-6383CWE-122

MongoDB C Driver bson_string_append may be vulnerable to a buffer overflow

Medium · published July 3, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00625 · 49.3th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2024-07-03T21:33Z
EPSS history
Timeline
  • 03 JUL 21:33Z
    MongoDB C Driver bson_string_append may be vulnerable to a buffer overflow
    cvelistv5