Out-of-bounds read in bson module of PyMongo

CVE-2024-5629

What is CVE-2024-5629?

An out-of-bounds read was identified in the bson module of PyMongo versions prior to 4.6.3. This vulnerability permits the deserialization of malformed BSON data sent from a server, which can trigger an exception potentially exposing arbitrary application memory. The implications of this vulnerability could lead to unauthorized access to sensitive data or system instability. Users are advised to upgrade to the latest version of PyMongo to mitigate risks associated with this vulnerability.

References