Vulnerability-Lookup

OPENSUSE-SU-2026:11706-1

Vulnerability from csaf_opensuse - Published: 2026-09-07 00:00 - Updated: 2026-09-07 00:00

Summary

bson-devel-2.5.2-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: bson-devel-2.5.2-1.1 on GA media

Description of the patch: These are all security issues fixed in the bson-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-11706

CVE-2026-84963

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-84964

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2026-84965

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-84969

Affected products

Recommended 16 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

10 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-84963/	self
https://www.suse.com/security/cve/CVE-2026-84964/	self
https://www.suse.com/security/cve/CVE-2026-84965/	self
https://www.suse.com/security/cve/CVE-2026-84969/	self
https://www.suse.com/security/cve/CVE-2026-84963	external
https://www.suse.com/security/cve/CVE-2026-84964	external
https://www.suse.com/security/cve/CVE-2026-84965	external
https://www.suse.com/security/cve/CVE-2026-84969	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "bson-devel-2.5.2-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the bson-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11706",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11706-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-84963 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-84963/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-84964 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-84964/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-84965 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-84965/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-84969 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-84969/"
      }
    ],
    "title": "bson-devel-2.5.2-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-07T00:00:00Z",
      "generator": {
        "date": "2026-09-07T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11706-1",
      "initial_release_date": "2026-09-07T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-09-07T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bson-devel-2.5.2-1.1.aarch64",
                "product": {
                  "name": "bson-devel-2.5.2-1.1.aarch64",
                  "product_id": "bson-devel-2.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libbson2-2.5.2-1.1.aarch64",
                "product": {
                  "name": "libbson2-2.5.2-1.1.aarch64",
                  "product_id": "libbson2-2.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libmongoc2-2.5.2-1.1.aarch64",
                "product": {
                  "name": "libmongoc2-2.5.2-1.1.aarch64",
                  "product_id": "libmongoc2-2.5.2-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "mongo-c-driver-devel-2.5.2-1.1.aarch64",
                "product": {
                  "name": "mongo-c-driver-devel-2.5.2-1.1.aarch64",
                  "product_id": "mongo-c-driver-devel-2.5.2-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bson-devel-2.5.2-1.1.ppc64le",
                "product": {
                  "name": "bson-devel-2.5.2-1.1.ppc64le",
                  "product_id": "bson-devel-2.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libbson2-2.5.2-1.1.ppc64le",
                "product": {
                  "name": "libbson2-2.5.2-1.1.ppc64le",
                  "product_id": "libbson2-2.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmongoc2-2.5.2-1.1.ppc64le",
                "product": {
                  "name": "libmongoc2-2.5.2-1.1.ppc64le",
                  "product_id": "libmongoc2-2.5.2-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "mongo-c-driver-devel-2.5.2-1.1.ppc64le",
                "product": {
                  "name": "mongo-c-driver-devel-2.5.2-1.1.ppc64le",
                  "product_id": "mongo-c-driver-devel-2.5.2-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bson-devel-2.5.2-1.1.s390x",
                "product": {
                  "name": "bson-devel-2.5.2-1.1.s390x",
                  "product_id": "bson-devel-2.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libbson2-2.5.2-1.1.s390x",
                "product": {
                  "name": "libbson2-2.5.2-1.1.s390x",
                  "product_id": "libbson2-2.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmongoc2-2.5.2-1.1.s390x",
                "product": {
                  "name": "libmongoc2-2.5.2-1.1.s390x",
                  "product_id": "libmongoc2-2.5.2-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mongo-c-driver-devel-2.5.2-1.1.s390x",
                "product": {
                  "name": "mongo-c-driver-devel-2.5.2-1.1.s390x",
                  "product_id": "mongo-c-driver-devel-2.5.2-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bson-devel-2.5.2-1.1.x86_64",
                "product": {
                  "name": "bson-devel-2.5.2-1.1.x86_64",
                  "product_id": "bson-devel-2.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libbson2-2.5.2-1.1.x86_64",
                "product": {
                  "name": "libbson2-2.5.2-1.1.x86_64",
                  "product_id": "libbson2-2.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmongoc2-2.5.2-1.1.x86_64",
                "product": {
                  "name": "libmongoc2-2.5.2-1.1.x86_64",
                  "product_id": "libmongoc2-2.5.2-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mongo-c-driver-devel-2.5.2-1.1.x86_64",
                "product": {
                  "name": "mongo-c-driver-devel-2.5.2-1.1.x86_64",
                  "product_id": "mongo-c-driver-devel-2.5.2-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bson-devel-2.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64"
        },
        "product_reference": "bson-devel-2.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bson-devel-2.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le"
        },
        "product_reference": "bson-devel-2.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bson-devel-2.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x"
        },
        "product_reference": "bson-devel-2.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bson-devel-2.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64"
        },
        "product_reference": "bson-devel-2.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libbson2-2.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64"
        },
        "product_reference": "libbson2-2.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libbson2-2.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le"
        },
        "product_reference": "libbson2-2.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libbson2-2.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x"
        },
        "product_reference": "libbson2-2.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libbson2-2.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64"
        },
        "product_reference": "libbson2-2.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmongoc2-2.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64"
        },
        "product_reference": "libmongoc2-2.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmongoc2-2.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le"
        },
        "product_reference": "libmongoc2-2.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmongoc2-2.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x"
        },
        "product_reference": "libmongoc2-2.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmongoc2-2.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64"
        },
        "product_reference": "libmongoc2-2.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mongo-c-driver-devel-2.5.2-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64"
        },
        "product_reference": "mongo-c-driver-devel-2.5.2-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mongo-c-driver-devel-2.5.2-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le"
        },
        "product_reference": "mongo-c-driver-devel-2.5.2-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mongo-c-driver-devel-2.5.2-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x"
        },
        "product_reference": "mongo-c-driver-devel-2.5.2-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mongo-c-driver-devel-2.5.2-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64"
        },
        "product_reference": "mongo-c-driver-devel-2.5.2-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-84963",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-84963"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver\u0027s BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticated party who can supply the input processed by an application that uses this component may cause that application to hold data that does not match what was submitted, which may result in unintended alteration of data.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-84963",
          "url": "https://www.suse.com/security/cve/CVE-2026-84963"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-07T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-84963"
    },
    {
      "cve": "CVE-2026-84964",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-84964"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-84964",
          "url": "https://www.suse.com/security/cve/CVE-2026-84964"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-07T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-84964"
    },
    {
      "cve": "CVE-2026-84965",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-84965"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An integer wraparound in an allocation size calculation in the BSON library\u0027s JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-84965",
          "url": "https://www.suse.com/security/cve/CVE-2026-84965"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-07T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-84965"
    },
    {
      "cve": "CVE-2026-84969",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-84969"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x",
          "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-84969",
          "url": "https://www.suse.com/security/cve/CVE-2026-84969"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:bson-devel-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libbson2-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:libmongoc2-2.5.2-1.1.x86_64",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.aarch64",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.ppc64le",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.s390x",
            "openSUSE Tumbleweed:mongo-c-driver-devel-2.5.2-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-07T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-84969"
    }
  ]
}

CVE-2026-84963 (GCVE-0-2026-84963)

Vulnerability from cvelistv5 – Published: 2026-09-03 15:03 – Updated: 2026-09-03 15:35

Title

Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser

Summary

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticated party who can supply the input processed by an application that uses this component may cause that application to hold data that does not match what was submitted, which may result in unintended alteration of data.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-03 15:35 UTC

CWE

CWE-681 - Incorrect Conversion between Numeric Types

Assigner

mongodb mitre root

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/CDRIVER-6407

Impacted products

1 product

Vendor	Product	Version
MongoDB	C Driver	Affected: 1.10.0 , < 1.30.9 (semver) Affected: 2.0.0 , < 2.5.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84963",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-03T15:35:10.846682Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-03T15:35:27.926Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "C Driver",
          "vendor": "MongoDB",
          "versions": [
            {
              "lessThan": "1.30.9",
              "status": "affected",
              "version": "1.10.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.5.2",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver\u0027s BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticated party who can supply the input processed by an application that uses this component may cause that application to hold data that does not match what was submitted, which may result in unintended alteration of data."
            }
          ],
          "value": "An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver\u0027s BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticated party who can supply the input processed by an application that uses this component may cause that application to hold data that does not match what was submitted, which may result in unintended alteration of data."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-681",
              "description": "CWE-681: Incorrect Conversion between Numeric Types",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-03T15:03:13.274Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/CDRIVER-6407"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser",
      "x_generator": {
        "engine": "cve_record_builder.py"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-84963",
    "datePublished": "2026-09-03T15:03:13.274Z",
    "dateReserved": "2026-09-02T17:58:52.742Z",
    "dateUpdated": "2026-09-03T15:35:27.926Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-84964 (GCVE-0-2026-84964)

Vulnerability from cvelistv5 – Published: 2026-09-03 15:02 – Updated: 2026-09-03 15:42

Title

Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client

Summary

A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly.

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-03 15:41 UTC

CWE

CWE-415 - Double Free

Assigner

mongodb mitre root

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/CDRIVER-6409

Impacted products

1 product

Vendor	Product	Version
MongoDB	C Driver	Affected: 1.17.0 , < 1.30.9 (semver) Affected: 2.0.0 , < 2.5.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84964",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-03T15:41:47.363270Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-03T15:42:32.343Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "C Driver",
          "vendor": "MongoDB",
          "versions": [
            {
              "lessThan": "1.30.9",
              "status": "affected",
              "version": "1.17.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.5.2",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly."
            }
          ],
          "value": "A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-415",
              "description": "CWE-415: Double Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-03T15:02:20.836Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/CDRIVER-6409"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client",
      "x_generator": {
        "engine": "cve_record_builder.py"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-84964",
    "datePublished": "2026-09-03T15:02:20.836Z",
    "dateReserved": "2026-09-02T17:58:52.742Z",
    "dateUpdated": "2026-09-03T15:42:32.343Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-84965 (GCVE-0-2026-84965)

Vulnerability from cvelistv5 – Published: 2026-09-03 15:01 – Updated: 2026-09-03 15:44

Title

Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds

Summary

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

5.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-03 15:43 UTC

CWE

CWE-190 - Integer Overflow or Wraparound

Assigner

mongodb mitre root

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/CDRIVER-6405

Impacted products

1 product

Vendor	Product	Version
MongoDB	C Driver	Affected: 1.10.0 , < 1.30.9 (semver) Affected: 2.0.0 , < 2.5.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84965",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-03T15:43:02.927377Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-03T15:44:49.921Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "C Driver",
          "vendor": "MongoDB",
          "versions": [
            {
              "lessThan": "1.30.9",
              "status": "affected",
              "version": "1.10.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.5.2",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An integer wraparound in an allocation size calculation in the BSON library\u0027s JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service."
            }
          ],
          "value": "An integer wraparound in an allocation size calculation in the BSON library\u0027s JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-03T15:01:21.882Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/CDRIVER-6405"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds",
      "x_generator": {
        "engine": "cve_record_builder.py"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-84965",
    "datePublished": "2026-09-03T15:01:21.882Z",
    "dateReserved": "2026-09-02T17:58:52.742Z",
    "dateUpdated": "2026-09-03T15:44:49.921Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-84969 (GCVE-0-2026-84969)

Vulnerability from cvelistv5 – Published: 2026-09-03 14:59 – Updated: 2026-09-03 15:08

Title

Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output

Summary

A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-03 15:07 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

mongodb mitre root

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/CDRIVER-6410

Impacted products

1 product

Vendor	Product	Version
MongoDB	C Driver	Affected: 1.30.0 , < 1.30.9 (semver) Affected: 2.0.0 , < 2.5.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84969",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-03T15:07:47.056292Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-03T15:08:11.873Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "C Driver",
          "vendor": "MongoDB",
          "versions": [
            {
              "lessThan": "1.30.9",
              "status": "affected",
              "version": "1.30.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.5.2",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered."
            }
          ],
          "value": "A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-03T14:59:01.427Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/CDRIVER-6410"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output",
      "x_generator": {
        "engine": "cve_record_builder.py"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-84969",
    "datePublished": "2026-09-03T14:59:01.427Z",
    "dateReserved": "2026-09-02T17:58:52.742Z",
    "dateUpdated": "2026-09-03T15:08:11.873Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

OPENSUSE-SU-2026:11706-1

CVE-2026-84963 (GCVE-0-2026-84963)

CVE-2026-84964 (GCVE-0-2026-84964)

CVE-2026-84965 (GCVE-0-2026-84965)

CVE-2026-84969 (GCVE-0-2026-84969)

Tags

Sightings

Nomenclature