{"id":"CVE-2026-93393","title":"A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend","summary":"A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outsid…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"vendor":"mongodb","product":"c_driver","affected":["c_driver >= 1.10.0, < 1.30.11","c_driver >= 2.2.0, < 2.5.4"],"patched":["c_driver 2.5.4"],"published":"2026-09-17","updated":"2026-09-29","sourceUpdated":"2026-09-29T19:17:54.137","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93393","references":[{"url":"https://jira.mongodb.org/browse/CDRIVER-6417","label":"cna@mongodb.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93393.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-93393"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93393"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00468,"epssPercentile":0.40321,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-18T17:33:19.062224Z"},"ingestedAt":"2026-09-17T21:29:16.991Z","slug":"CVE-2026-93393","body":"## Overview\n\nA heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming encrypted traffic after the TLS handshake completes. No authentication or user interaction is required, because the affected processing occurs before any application-level authentication completes. Triggering this issue may lead to memory corruption in the client process, disclosure of adjacent heap memory, or termination of the process.\n\n## Affected\n\n- `c_driver >= 1.10.0, < 1.30.11`\n- `c_driver >= 2.2.0, < 2.5.4`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `c_driver 2.5.4`\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-10-02 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93393.json)","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}