Threats tagged 'bit-mongodb-2025-11979'

A use-after-free vulnerability in the MongoDB server query planner can cause the server to crash or exhibit undefined behavior. This occurs when an authorized user issues a DDL operation concurrently with queries under certain conditions. The issue affects MongoDB Server versions 7.0.0 up to but not including 7.0.25, and 8.0.0 up to but not including 8.0.15. Version 8.2.0 is also mentioned but without explicit affected range. A patch is available to address this vulnerability.