| Package | Affected versions | Patched versions |
|---|---|---|
| mongodb | ≥ 7.0.0, < 7.0.39≥ 8.0.0, < 8.0.28≥ 8.2.0, < 8.2.12≥ 8.3.0, < 8.3.7 | 7.0.398.0.288.2.128.3.7 |
A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read via a crafted aggregation pipeline. The vulnerability can be exploited by an authenticated user by generating a malformed BSONColumn data containing a CodeWScope element, bypassing wire-level BSON validation. When the forged element is decompressed, the unchecked size value is used in pointer arithmetic, causing either a server crash or disclosure of adjacent heap memory contents.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free