Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Mongodb Subscribe
Filtered by product C Driver
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-12135 2 Mongodb, Whoopsie Project 2 C Driver, Whoopsie 2020-08-12 4.3 MEDIUM 5.5 MEDIUM
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.