This vulnerability involves an integer overflow or wraparound (CWE-190) in MongoDB Server's libmongocrypt library. Specifically, the library insufficiently validates values supplied in the payload of an aggregation command. An authenticated user with read/write privileges can exploit this by sending a specially crafted aggregation command that causes the mongod process to allocate an excessively large amount of memory, resulting in an out-of-memory condition and termination of the mongod process. The affected versions are exactly 8.2.0 and 8.3.0. There is no vendor advisory or patch information available at this time.

Successful exploitation leads to denial of service by causing the mongod process to terminate due to an out-of-memory condition. This disrupts database availability but does not indicate data corruption or unauthorized data access based on the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted authenticated users only and monitor for unusual aggregation command activity. No official fix or temporary workaround is currently documented.