Search: CVE-2026-96749

CVE-2026-96749 is an integer overflow vulnerability in the BSON document encoding component of the MongoDB Python Driver's native extension. It occurs when a single document is constructed from a very large amount of user-supplied data, causing size arithmetic to overflow a signed 32-bit integer. This can lead to a write outside the bounds of an allocated buffer within the application's process. The vulnerability affects versions from 1.9.0 up to but not including 4.18.2. No exploits are known in the wild, and the vulnerability has a high severity rating with a CVSS score of 7.5.