CVE-2026-114645Medium· 5.2▾ SunlitA flaw was found in mongo-c-driver. An integer wraparound in the Windows-native Kerberos authentication code can occur when an excessively long credential value is supplied in the client connection configuration. An attacker capable of mod…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 28.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 25.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
Last analysed / modified upstream
0.2%
A flaw was found in mongo-c-driver. An integer wraparound in the Windows-native Kerberos authentication code can occur when an excessively long credential value is supplied in the client connection configuration. An attacker capable of modifying this client configuration can cause the driver to allocate an undersized memory buffer and write outside its bounds. This flaw may result in memory corruption and a Denial of Service (DoS) of the client application.
mongo-c-driver: mongo-c-driver: Denial of Service via integer wraparound in Windows authentication. Released 2026-10-22, updated 2026-10-23.
Not affected:
Refer to the advisory for fix availability.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116153Low· 2.5ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations (CVE-2026-116153)
CVE-2026-105923Medium· 5.5qt6: qt6: Denial of Service via crafted SVG in VectorImage (CVE-2026-105923)
CVE-2026-106438Medium· 4.0An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them
CVE-2026-106437Medium· 6.2The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum
CVE-2026-106431Medium· 5.7An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary
CVE-2026-106428Low· 3.7An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message