MongoDB C Driver any version

MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver

Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client

Accessing Untrusted Directory May Allow Local Privilege Escalation

MongoDB client C Driver may infinitely loop when validating certain BSON input data

Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

bson_validate may skip validation when processing certain inputs

Bulk write with options may read invalid memory

Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser

Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output

Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds

Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver

bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.

Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer