CVE-2026-84969 PUBLISHED

Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output

Assigner: mongodb
Reserved: 02.09.2026 Published: 03.09.2026 Updated: 03.09.2026

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
CVSS Score: 6.3

Product Status

Vendor MongoDB
Product C Driver
Versions Default: unaffected
  • affected from 1.30.0 to 1.30.9 (excl.)
  • affected from 2.0.0 to 2.5.2 (excl.)

References

Problem Types

  • CWE-787: Out-of-bounds Write CWE