MongoDB C Driver.

Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views

• MongoDB C Driver
• Memory corruption

MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata

• MongoDB C Driver
• Memory corruption

remote abort and memory disclosure from a malformed cursor.ns

• MongoDB C Driver
• Denial of service

MongoDB C Driver GridFS gap lets a shared writer recover a protected client's password

• MongoDB C Driver
• Memory corruption

MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)

• MongoDB C Driver
• Denial of service

BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards

• MongoDB C# Driver
• CWE-681

Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder

• MongoDB C# Driver
• CWE-185

Update operator injection via single-element list rewriting in the update builder

• MongoDB C# Driver
• Other injection

Cross-document data leak via malformed BSON array parsing in reused thread buffer

• MongoDB C# Driver
• Memory corruption

Plaintext exposure of encrypted fields via ANSI code-page corruption of database name

• MongoDB C# Driver
• MongoDB.Libmongocrypt NuGet package
• CWE-838

Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache

• MongoDB C# Driver
• CWE-1025

NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys

• MongoDB C# Driver
• Other injection

NoSQL operator injection via unvalidated replacement document in findOneAndReplace

• MongoDB C# Driver
• Other injection

NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire

• MongoDB C# Driver
• CWE-130

Heap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrapping

• MongoDB C Driver
• Memory corruption

Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserialization

• MongoDB C# Driver
• Denial of service

Duplicate geometry fields via unvalidated GeoJSON extra members

• MongoDB C# Driver
• CWE-694

Query and rename target confusion via embedded NUL truncation in MongoDB C++ Driver

• MongoDB C++ Driver
• CWE-436

Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

• MongoDB C Driver
• CWE-682

Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

• MongoDB C Driver
• Memory corruption

One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver

• MongoDB C Driver
• Memory corruption

Out-of-bounds read in SCRAM response parsing in MongoDB C Driver

• MongoDB C Driver
• Memory corruption

Heap buffer overflow via mid-scan command list growth in client topology monitoring

• MongoDB C Driver
• Memory corruption

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver

• MongoDB C Driver
• Other injection

Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver

• MongoDB C Driver
• Memory corruption

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ Driver

• MongoDB C++ Driver
• Other injection

Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver

• MongoDB C# Driver
• Other injection

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver

• MongoDB C# Driver
• Other injection

Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser

• MongoDB C Driver
• CWE-681

Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client

• MongoDB C Driver
• Memory corruption

Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds

• MongoDB C Driver
• Memory corruption

BSON element injection via NUL-embedded document keys in builder append

• MongoDB C++ Driver
• CWE-681

Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output

• MongoDB C Driver
• Memory corruption

Heap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parser

• MongoDB C++ Driver
• CWE-681

KMS master key exposure via unredacted credential serialization in driver settings string

• MongoDB C# Driver
• Information disclosure

Connection-option injection via unescaped settings in the canonical MongoDB URL builder

• MongoDB C# Driver
• Command injection

NoSQL injection via array replacement bypassing update shape validation in driver write path

• MongoDB C# Driver
• Other injection

NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation

• MongoDB C# Driver
• Other injection

Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver

• MongoDB C Driver
• CWE-99

Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver

• MongoDB C++ Driver
• CWE-116