GHSA-86gh-39m5-hhg6Medium· 5.1▾ SunlitDuplicate Advisory: PYTHON-6110 Out-of-bounds read in BSON decoding via a malformed Regex element
▾ Sunlit zone — Low / medium · no exploitation signal
impact 28.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via GHSA
Last analysed / modified upstream
This advisory has been withdrawn because it is a duplicate of GHSA-98qm-wvgf-w4cf. This link is maintained to preserve external references.
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode_all API can cause the application process to terminate when the C extension is loaded. The driver's normal database wire-protocol path does not reach this code.
pymongo >= 3.9.0, <= 4.18.2Refer to the advisory for the patched release.
Connected by shared product, vendor, weakness, or advisory.
GHSA-8h2c-ghff-mpg9Medium· 8.3Duplicate Advisory: pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods
CVE-2024-5629Medium· 4.7PyMongo Out-of-bounds Read in the bson module
CVE-2021-3506High· 7.1An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4
CVE-2023-6610High· 7.1An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel
CVE-2019-11050Medium· 4.8When PHP EXIF extension is parsing EXIF information from an image, e.g
CVE-2019-11046Low· 3.7In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying it with string containing characters…