Threats tagged 'ghsa-xqmg-xhh6-75p8'

A use-after-free vulnerability exists in MongoDB's Slot-Based Execution (SBE) implementation of a window function accumulator used in certain $setWindowFields aggregation pipelines. This flaw allows an authenticated user with readWrite privileges to trigger a heap out-of-bounds read during serialization of a stale pointer, potentially exposing adjacent heap memory and causing the mongod server to crash.