Uncontrolled Resource Consumption in MongoDB C# Driver's BSON Library

CVE-2026-114644

What is CVE-2026-114644?

The MongoDB C# Driver's BSON library is susceptible to an uncontrolled resource consumption vulnerability, specifically related to its deserialization process. This issue arises when untrusted content is deserialized, resulting in indefinite retention of data during the application's lifecycle. Consequently, malicious actors may exploit this flaw to cause excessive memory usage, potentially leading to denial of service by exhausting the application's memory resources. Importantly, this vulnerability does not compromise the confidentiality or integrity of data nor does it affect any MongoDB server components.

References