| Package | Affected versions | Patched versions |
|---|---|---|
| c driver | ≥ 1.30.0, < 1.30.9≥ 2.0.0, < 2.5.2 | 1.30.92.5.2 |
A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free