Out-of-Bounds Write Vulnerability in MongoDB C Driver
CVE-2026-96746

8.3HIGH

Key Information:

Vendor

Mongodb
Status
C Driver
Vendor
CVE Published:
24 September 2026

What is CVE-2026-96746?

An out-of-bounds write vulnerability in the connection-monitoring logic of the MongoDB C Driver could allow attackers who control name resolution and the response of hosts listed in a client's connection string to write beyond the intended memory buffer. This issue may lead to application crashes, causing instability and potential data loss. Users are advised to update to the latest versions of the MongoDB C Driver to mitigate this risk.

Affected Version(s)

C Driver 0 < 1.30.12

C Driver 2.0.0 < 2.5.5

References

https://github.com/mongodb/mongo-c-driver/releases/tag/1....
https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.5

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.