Security Advisory

CVE-2020-12135

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-24 00:31:51
Last updated 2024-08-04 11:48:58
Assigner mitre
State PUBLISHED

Description

bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.