Search

Find a vulnerability

Search criteria

    5 vulnerabilities found for C Driver by MongoDB

    CVE-2026-81524 (GCVE-0-2026-81524)

    Vulnerability from nvd – Published: 2026-08-27 18:32 – Updated: 2026-08-28 15:50
    VLAI
    Title
    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver
    Summary
    A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-28 15:49 UTC
    CWE
    • CWE-99 - Improper Control of Resource Identifier ('Resource Injection')
    Impacted products
    Vendor Product Version
    MongoDB C Driver Affected: 1.0.0 , < 2.5.1 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-81524",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-28T15:49:53.561189Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-28T15:50:10.011Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "C Driver",
              "vendor": "MongoDB",
              "versions": [
                {
                  "lessThan": "2.5.1",
                  "status": "affected",
                  "version": "1.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended."
                }
              ],
              "value": "A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "LOW",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-99",
                  "description": "CWE-99: Improper Control of Resource Identifier (\u0027Resource Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-27T20:42:01.035Z",
            "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
            "shortName": "mongodb"
          },
          "references": [
            {
              "url": "https://jira.mongodb.org/browse/CDRIVER-6424"
            },
            {
              "url": "https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.1"
            }
          ],
          "source": {
            "discovery": "INTERNAL"
          },
          "title": "Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver",
          "x_generator": {
            "engine": "Vulnogram 1.0.4"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "assignerShortName": "mongodb",
        "cveId": "CVE-2026-81524",
        "datePublished": "2026-08-27T18:32:25.355Z",
        "dateReserved": "2026-08-26T22:13:58.379Z",
        "dateUpdated": "2026-08-28T15:50:10.011Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2025-12119 (GCVE-0-2025-12119)

    Vulnerability from nvd – Published: 2025-11-18 20:21 – Updated: 2026-01-14 19:04
    VLAI
    Title
    Bulk write with options may read invalid memory
    Summary
    A mongoc_bulk_operation_t may read invalid memory if large options are passed.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-11-19 16:14 UTC
    CWE
    • CWE-825 - Expired Pointer Dereference
    Impacted products
    Vendor Product Version
    MongoDB C Driver Affected: 1.9.0 , ≤ 1.30.5 (semver)
    Affected: 2.0.0 , ≤ 2.1.1 (semver)
    Create a notification for this product.
    MongoDB PHP Driver Affected: 0 , ≤ 2.1.2 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-12119",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-11-19T16:14:28.900742Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-11-19T16:48:51.591Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2026-01-14T19:04:31.839Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "https://lists.debian.org/debian-lts-announce/2026/01/msg00009.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://github.com/mongodb/mongo-c-driver",
              "defaultStatus": "unaffected",
              "product": "C Driver",
              "vendor": "MongoDB",
              "versions": [
                {
                  "lessThanOrEqual": "1.30.5",
                  "status": "affected",
                  "version": "1.9.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "2.1.1",
                  "status": "affected",
                  "version": "2.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://github.com/mongodb/mongo-php-driver",
              "defaultStatus": "unaffected",
              "product": "PHP Driver",
              "vendor": "MongoDB",
              "versions": [
                {
                  "lessThanOrEqual": "2.1.2",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "A mongoc_bulk_operation_t may read invalid memory if large options are passed."
                }
              ],
              "value": "A mongoc_bulk_operation_t may read invalid memory if large options are passed."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "LOCAL",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-825",
                  "description": "CWE-825 Expired Pointer Dereference",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-11-18T20:21:08.252Z",
            "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
            "shortName": "mongodb"
          },
          "references": [
            {
              "url": "https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.2"
            },
            {
              "url": "https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.6"
            },
            {
              "url": "https://github.com/mongodb/mongo-c-driver/releases/tag/2.1.2"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Bulk write with options may read invalid memory",
          "x_generator": {
            "engine": "Vulnogram 0.5.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "assignerShortName": "mongodb",
        "cveId": "CVE-2025-12119",
        "datePublished": "2025-11-18T20:21:08.252Z",
        "dateReserved": "2025-10-23T16:43:24.098Z",
        "dateUpdated": "2026-01-14T19:04:31.839Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-81524 (GCVE-0-2026-81524)

    Vulnerability from cvelistv5 – Published: 2026-08-27 18:32 – Updated: 2026-08-28 15:50
    VLAI
    Title
    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver
    Summary
    A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-28 15:49 UTC
    CWE
    • CWE-99 - Improper Control of Resource Identifier ('Resource Injection')
    Impacted products
    Vendor Product Version
    MongoDB C Driver Affected: 1.0.0 , < 2.5.1 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-81524",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-28T15:49:53.561189Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-28T15:50:10.011Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "C Driver",
              "vendor": "MongoDB",
              "versions": [
                {
                  "lessThan": "2.5.1",
                  "status": "affected",
                  "version": "1.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended."
                }
              ],
              "value": "A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "LOW",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-99",
                  "description": "CWE-99: Improper Control of Resource Identifier (\u0027Resource Injection\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-27T20:42:01.035Z",
            "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
            "shortName": "mongodb"
          },
          "references": [
            {
              "url": "https://jira.mongodb.org/browse/CDRIVER-6424"
            },
            {
              "url": "https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.1"
            }
          ],
          "source": {
            "discovery": "INTERNAL"
          },
          "title": "Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver",
          "x_generator": {
            "engine": "Vulnogram 1.0.4"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "assignerShortName": "mongodb",
        "cveId": "CVE-2026-81524",
        "datePublished": "2026-08-27T18:32:25.355Z",
        "dateReserved": "2026-08-26T22:13:58.379Z",
        "dateUpdated": "2026-08-28T15:50:10.011Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2025-12119 (GCVE-0-2025-12119)

    Vulnerability from cvelistv5 – Published: 2025-11-18 20:21 – Updated: 2026-01-14 19:04
    VLAI
    Title
    Bulk write with options may read invalid memory
    Summary
    A mongoc_bulk_operation_t may read invalid memory if large options are passed.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-11-19 16:14 UTC
    CWE
    • CWE-825 - Expired Pointer Dereference
    Impacted products
    Vendor Product Version
    MongoDB C Driver Affected: 1.9.0 , ≤ 1.30.5 (semver)
    Affected: 2.0.0 , ≤ 2.1.1 (semver)
    Create a notification for this product.
    MongoDB PHP Driver Affected: 0 , ≤ 2.1.2 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-12119",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-11-19T16:14:28.900742Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-11-19T16:48:51.591Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          },
          {
            "providerMetadata": {
              "dateUpdated": "2026-01-14T19:04:31.839Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "https://lists.debian.org/debian-lts-announce/2026/01/msg00009.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://github.com/mongodb/mongo-c-driver",
              "defaultStatus": "unaffected",
              "product": "C Driver",
              "vendor": "MongoDB",
              "versions": [
                {
                  "lessThanOrEqual": "1.30.5",
                  "status": "affected",
                  "version": "1.9.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "2.1.1",
                  "status": "affected",
                  "version": "2.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "collectionURL": "https://github.com/mongodb/mongo-php-driver",
              "defaultStatus": "unaffected",
              "product": "PHP Driver",
              "vendor": "MongoDB",
              "versions": [
                {
                  "lessThanOrEqual": "2.1.2",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "A mongoc_bulk_operation_t may read invalid memory if large options are passed."
                }
              ],
              "value": "A mongoc_bulk_operation_t may read invalid memory if large options are passed."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "LOCAL",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            },
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-825",
                  "description": "CWE-825 Expired Pointer Dereference",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-11-18T20:21:08.252Z",
            "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
            "shortName": "mongodb"
          },
          "references": [
            {
              "url": "https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.2"
            },
            {
              "url": "https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.6"
            },
            {
              "url": "https://github.com/mongodb/mongo-c-driver/releases/tag/2.1.2"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Bulk write with options may read invalid memory",
          "x_generator": {
            "engine": "Vulnogram 0.5.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "assignerShortName": "mongodb",
        "cveId": "CVE-2025-12119",
        "datePublished": "2025-11-18T20:21:08.252Z",
        "dateReserved": "2025-10-23T16:43:24.098Z",
        "dateUpdated": "2026-01-14T19:04:31.839Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CERTFR-2024-AVI-0662

    Vulnerability from certfr_avis - Published: 2024-08-09 - Updated: 2024-08-09

    Une vulnérabilité a été découverte dans MongoDB. Elle permet à un attaquant de provoquer une élévation de privilèges.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    MongoDB C Driver C Driver versions antérieures à 1.26.2 sur Windows
    MongoDB Server Server versions 7.x antérieures à 7.3.3 sur Windows
    MongoDB Server Server versions 5.0.x antérieures à 5.0.27 sur Windows
    MongoDB Server Server versions 6.0.x antérieures à 6.0.16 sur Windows
    MongoDB Server Server versions 7.0.x antérieures à 7.0.12 sur Windows
    MongoDB PHP Driver PHP Driver versions antérieures à 1.18.1 sur Windows
    References
    Bulletin de sécurité MongoDB PHPC-2369 2024-08-07 vendor-advisory

    Show details on source website

    {
      "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
      "affected_systems": [
        {
          "description": "C Driver versions ant\u00e9rieures \u00e0 1.26.2 sur Windows",
          "product": {
            "name": "C Driver",
            "vendor": {
              "name": "MongoDB",
              "scada": false
            }
          }
        },
        {
          "description": "Server versions 7.x ant\u00e9rieures \u00e0 7.3.3 sur Windows",
          "product": {
            "name": "Server",
            "vendor": {
              "name": "MongoDB",
              "scada": false
            }
          }
        },
        {
          "description": "Server versions 5.0.x ant\u00e9rieures \u00e0 5.0.27 sur Windows",
          "product": {
            "name": "Server",
            "vendor": {
              "name": "MongoDB",
              "scada": false
            }
          }
        },
        {
          "description": "Server versions 6.0.x ant\u00e9rieures \u00e0 6.0.16 sur Windows",
          "product": {
            "name": "Server",
            "vendor": {
              "name": "MongoDB",
              "scada": false
            }
          }
        },
        {
          "description": "Server versions 7.0.x ant\u00e9rieures \u00e0 7.0.12 sur Windows",
          "product": {
            "name": "Server",
            "vendor": {
              "name": "MongoDB",
              "scada": false
            }
          }
        },
        {
          "description": "PHP Driver versions ant\u00e9rieures \u00e0 1.18.1 sur Windows",
          "product": {
            "name": "PHP Driver",
            "vendor": {
              "name": "MongoDB",
              "scada": false
            }
          }
        }
      ],
      "affected_systems_content": "",
      "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
      "cves": [
        {
          "name": "CVE-2024-7553",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-7553"
        }
      ],
      "initial_release_date": "2024-08-09T00:00:00",
      "last_revision_date": "2024-08-09T00:00:00",
      "links": [],
      "reference": "CERTFR-2024-AVI-0662",
      "revisions": [
        {
          "description": "Version initiale",
          "revision_date": "2024-08-09T00:00:00.000000"
        }
      ],
      "risks": [
        {
          "description": "\u00c9l\u00e9vation de privil\u00e8ges"
        }
      ],
      "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans MongoDB. Elle permet \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges.",
      "title": "Vuln\u00e9rabilit\u00e9 dans MongoDB",
      "vendor_advisories": [
        {
          "published_at": "2024-08-07",
          "title": "Bulletin de s\u00e9curit\u00e9 MongoDB PHPC-2369",
          "url": "https://jira.mongodb.org/browse/PHPC-2369"
        }
      ]
    }