SB2026081853 - Improper Validation of Specified Index, Position, or Offset in Input in MongoDB driver for C

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026081853

SB2026081853 - Improper Validation of Specified Index, Position, or Offset in Input in MongoDB driver for C

Published: August 18, 2026

Security Bulletin ID SB2026081853
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper Validation of Specified Index, Position, or Offset in Input (CVE-ID: CVE-2026-9100)

CWE-ID: CWE-1285 - Improper Validation of Specified Index, Position, or Offset in Input

CVSSv4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to disclose sensitive information or cause a denial of service.

The vulnerability exists due to improper validation of specified index, position, or offset in input in the legacy GridFS file reader API when processing malformed file metadata from GridFS collections. A remote user can supply crafted documents in a GridFS collection to disclose sensitive information or cause a denial of service.

The issue may result in a division-by-zero crash or an out-of-bounds read of process memory contents.


Remediation

Install update from vendor's website.

References