Security Advisory

CVE-2024-6383

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-03 21:33:47
Last updated 2025-11-03 19:34:31
Assigner mongodb
State PUBLISHED

Description

The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1