This vulnerability (CWE-416) in MongoDB Server arises from the use of an internal reference after the underlying memory has been freed during execution of certain queries against time-series collections. It requires an authenticated user with read and write privileges to exploit. The impact includes potential server crashes and unintended disclosure of freed memory contents within query results. The affected versions explicitly identified are 8.0 and 8.3.0. No vendor advisory or patch information is currently provided, and the vulnerability is publicly disclosed with a CVSS 4.0 score of 7.1.

An attacker with authenticated read and write access can exploit this vulnerability to cause the MongoDB server to crash or to leak contents of freed memory through query results. This could lead to denial of service or exposure of sensitive data residing in freed memory. The impact is limited to authenticated users with sufficient privileges and specific query conditions on time-series collections.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to authenticated users with read and write privileges on time-series collections to trusted personnel only. Monitor vendor communications for updates on patches or official mitigations.