Threat Intelligence Database

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable.

A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to terminate unexpectedly. Reaching this code requires a build in which the optional external SASL authentication backend is present and a connection configured to use it.

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash (via a division-by-zero) or silently leak process memory contents (via an out-of-bounds read).

CVE-2026-6691 is a high-severity vulnerability in the MongoDB C Driver version 2.1.0. It involves unsafe string copying in the Cyrus SASL integration during username canonicalization, leading to a heap buffer overflow. This flaw can be triggered by passing untrusted input in the username field of a MongoDB URI when using the GSSAPI authentication mechanism. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that rely on these functions to validate untrusted BSON data before further processing. This issue affects MongoDB C Driver versions prior to 1.30.5, MongoDB C Driver version 2.0.0 and MongoDB C Driver version 2.0.1

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.

HighVulnerabilityUnited StatesCanadaUnited Kingdom+7#cve#cve-2025-14911

A mongoc_bulk_operation_t may read invalid memory if large options are passed.

MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve#cve-2025-12119#cwe-825

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e.an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve#cve-2023-0437#cwe-835