CVE-2025-14911

Publication date

2026-01-27 17:29:21

Family

mongodb

State

PUBLISHED

Description

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.