一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-84969 [LOW] – A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can

未分类
📑 文章目录

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.