This vulnerability arises from a missing bounds check in the BSON CodeWScope element accessors within MongoDB Server. An attacker with authentication privileges can create a specially crafted aggregation pipeline containing malformed BSONColumn data with a CodeWScope element. Because wire-level BSON validation is bypassed, the unchecked size value is used in pointer arithmetic during decompression, triggering an out-of-bounds heap read. The impact includes possible server crashes or leakage of adjacent heap memory data. The CVSS 4.0 score is 7.1 (high severity), reflecting network attack vector, low attack complexity, no user interaction, and high impact on availability. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation allows an authenticated user to cause a server crash or disclose adjacent heap memory contents due to an out-of-bounds read. This can lead to denial of service or potential information leakage from the MongoDB Server process memory.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict authenticated user privileges to trusted users only and monitor for unusual aggregation pipeline usage. Avoid processing untrusted BSONColumn data containing CodeWScope elements.