This vulnerability involves a race condition in MongoDB Server's document value layer where concurrent threads operate on shared internal memory without synchronization. An authenticated user with read-write access can exploit this to cause memory corruption and server termination. The flaw affects the server's internal memory management, potentially leading to corrupted process memory containing attacker-controlled data. The CVSS 3.1 base score is 7.5, reflecting high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring low privileges but high attack complexity.

Successful exploitation can cause server termination (denial of service) and memory corruption with user-influenced content, potentially compromising confidentiality, integrity, and availability of the MongoDB server process. An attacker with ordinary read-write privileges can trigger this condition remotely over the normal client protocol.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict access to trusted users and monitor for unusual server crashes.