SB2026102510 - Fedora EPEL 10.3 update for mongo-c-driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026102510

SB2026102510 - Fedora EPEL 10.3 update for mongo-c-driver

Published: October 25, 2026

Security Bulletin ID SB2026102510
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 vulnerabilities.


1) Incorrect calculation (CVE-ID: CVE-2026-106438)

CWE-ID: CWE-682 - Incorrect Calculation

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause an application to store or use an incorrect numeric value.

The vulnerability exists due to an incorrect exactness calculation in the MongoDB C Driver Decimal128 string parser when processing over-precision decimal strings containing leading zeros. A remote attacker can supply a crafted decimal string to an embedding application, including through Extended JSON parsing, to cause the parser to accept a value different from the supplied text instead of rejecting the input.


2) Integer underflow (CVE-ID: CVE-2026-106437)

CWE-ID: CWE-191 - Integer underflow

CVSSv4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service, read adjacent process memory, or corrupt adjacent process memory.

The vulnerability exists due to unsigned integer underflow in the MongoDB C Driver BSON buffer-reservation API when append or comparison operations process a document with a recorded length below the five-byte BSON minimum. A remote attacker can influence the length an embedding application supplies to bson_reserve_buffer to trigger out-of-bounds reads or writes during subsequent affected operations, causing application termination or access to adjacent process memory.


3) Heap-based buffer overflow (CVE-ID: CVE-2026-106431)

CWE-ID: CWE-122 - Heap-based Buffer Overflow

CVSSv4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to corrupt adjacent process memory or cause a denial of service.

The vulnerability exists due to a one-byte heap-based buffer overflow caused by an off-by-one error in the MongoDB C Driver BSON bulk document writer when serializing documents that end at a specific buffer boundary. A remote attacker can influence the size of documents serialized by an embedding application using the BSON bulk-writer API to cause a zero byte to be written immediately past a heap allocation, corrupting adjacent process memory or terminating the process.


Remediation

Install update from vendor's website.

References