Known vulnerabilities in mongo-c-driver
Vendor:
Fedoraproject
Software:
mongo-c-driver
Software CPE:
cpe:2.3:o:fedoraproject:mongo-c-driver:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
14
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
1.30.14-1.el10_2
1.30.14-1.el8
1.30.14-1.el9
1.30.14-1.fc44
1.30.14-1.fc43
2.5.7-1.el10_3
2.5.7-1.fc45
2.5.7-1.el10_4
1.30.13-1.el9
1.30.13-1.el8
1.30.13-1.fc44
1.30.13-1.el10_2
1.30.13-1.fc43
2.5.6-1.fc45
2.5.6-1.el10_3
2.5.6-1.el10_4
1.30.11-1.fc43
1.30.11-1.el9
1.30.11-1.fc44
1.30.11-1.el8
2.5.4-1.fc45
2.5.4-1.el10_3
2.5.4-1.el10_4
1.30.10-1.el9
1.30.10-1.el10_2
1.30.10-1.fc44
1.30.10-1.fc43
2.5.3-1.fc45
2.5.3-1.el10_3
1.30.9-1.el10_2
1.30.9-1.fc44
1.30.9-1.el9
1.30.9-1.fc43
1.30.9-1.el8
2.5.2-1.el10_3
2.5.2-1.el10_4
2.5.2-1.fc45
2.5.1-1.fc45
2.5.1-1.el10_3
2.5.1-1.el10_4
2.3.1-2.fc45
1.30.7-2.fc44
1.30.7-2.fc43
1.30.7-2.el8
1.30.7-2.el10_2
1.30.7-2.fc42
1.30.7-2.el9
1.30.7-2.el10_1
1.13.0-1.fc29
1.24.3-2.el9
1.24.3-2.fc38
1.24.3-2.el8
Vulnerabilities (14)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU157654 - Heap-based Buffer Overflow CVE-2026-114645 |
CWE-122 | Low | 1.30.14-1.el8, 1.30.14-1.el9, 1.30.14-1.el10_2, 1.30.14-1.fc43, 1.30.14-1.fc44, 2.5.7-1.el10_3, 2.5.7-1.el10_4, 2.5.7-1.fc45 | 25.10.2026 |
SB2026102508 SB2026102729 SB2026102730 and 6 more |
||
| #VU157653 - Heap-based Buffer Overflow CVE-2026-106431 |
CWE-122 | Medium | 1.30.13-1.el8, 1.30.13-1.el9, 1.30.13-1.el10_2, 1.30.13-1.fc43, 1.30.13-1.fc44, 2.5.6-1.el10_3, 2.5.6-1.el10_4, 2.5.6-1.fc45 | 25.10.2026 |
SB2026102507 SB2026102509 SB2026102510 and 6 more |
||
| #VU157652 - Incorrect Calculation CVE-2026-106438 |
CWE-682 | Medium | 1.30.13-1.el8, 1.30.13-1.el9, 1.30.13-1.el10_2, 1.30.13-1.fc43, 1.30.13-1.fc44, 2.5.6-1.el10_3, 2.5.6-1.el10_4, 2.5.6-1.fc45 | 25.10.2026 |
SB2026102507 SB2026102509 SB2026102510 and 6 more |
||
| #VU157651 - Integer underflow CVE-2026-106437 |
CWE-191 | Medium | 1.30.13-1.el8, 1.30.13-1.el9, 1.30.13-1.el10_2, 1.30.13-1.fc43, 1.30.13-1.fc44, 2.5.6-1.el10_3, 2.5.6-1.el10_4, 2.5.6-1.fc45 | 25.10.2026 |
SB2026102507 SB2026102509 SB2026102510 and 6 more |
||
| #VU157650 - Out-of-bounds read CVE-2026-106428 |
CWE-125 | Medium | 1.30.13-1.el8, 1.30.13-1.el9, 1.30.13-1.el10_2, 1.30.13-1.fc43, 1.30.13-1.fc44 | 25.10.2026 |
SB2026102507 SB2026102512 SB2026102513 and 3 more |
||
| #VU151670 - Heap-based Buffer Overflow CVE-2026-88035 |
CWE-122 | Low | 1.30.10-1.el9, 1.30.10-1.el10_2, 1.30.10-1.fc43, 1.30.10-1.fc44, 1.30.11-1.el8, 1.30.11-1.el9, 1.30.11-1.fc43, 1.30.11-1.fc44, 2.5.3-1.el10_3, 2.5.3-1.fc45, 2.5.4-1.el10_3, 2.5.4-1.el10_4, 2.5.4-1.fc45 | 22.09.2026 |
SB2026092274 SB2026092280 SB2026092281 and 11 more |
||
| #VU151669 - Improper Neutralization of Special Elements in Data Query Logic CVE-2026-88036 |
CWE-943 | Medium | 1.30.10-1.el9, 1.30.10-1.el10_2, 1.30.10-1.fc43, 1.30.10-1.fc44, 1.30.11-1.el8, 1.30.11-1.el9, 1.30.11-1.fc43, 1.30.11-1.fc44, 2.5.3-1.el10_3, 2.5.3-1.fc45, 2.5.4-1.el10_3, 2.5.4-1.el10_4, 2.5.4-1.fc45 | 22.09.2026 |
SB2026092274 SB2026092280 SB2026092281 and 11 more |
||
| #VU147246 - Integer overflow CVE-2026-84965 |
CWE-190 | Low | 1.30.9-1.el8, 1.30.9-1.el9, 1.30.9-1.el10_2, 1.30.9-1.fc43, 1.30.9-1.fc44, 2.5.2-1.el10_3, 2.5.2-1.el10_4, 2.5.2-1.fc45 | 07.09.2026 |
SB2026090753 SB2026090764 SB2026090765 and 10 more |
||
| #VU147245 - Incorrect Conversion between Numeric Types CVE-2026-84963 |
CWE-681 | Medium | 1.30.9-1.el8, 1.30.9-1.el9, 1.30.9-1.el10_2, 1.30.9-1.fc43, 1.30.9-1.fc44, 2.5.2-1.el10_3, 2.5.2-1.el10_4, 2.5.2-1.fc45 | 07.09.2026 |
SB2026090753 SB2026090764 SB2026090765 and 10 more |
||
| #VU147244 - Double Free CVE-2026-84964 |
CWE-415 | Medium | 1.30.9-1.el8, 1.30.9-1.el9, 1.30.9-1.el10_2, 1.30.9-1.fc43, 1.30.9-1.fc44, 2.5.2-1.el10_3, 2.5.2-1.el10_4, 2.5.2-1.fc45 | 07.09.2026 |
SB2026090753 SB2026090764 SB2026090765 and 10 more |
||
| #VU147243 - Heap-based Buffer Overflow CVE-2026-84969 |
CWE-122 | Low | 1.30.9-1.el8, 1.30.9-1.el9, 1.30.9-1.el10_2, 1.30.9-1.fc43, 1.30.9-1.fc44, 2.5.2-1.el10_3, 2.5.2-1.el10_4, 2.5.2-1.fc45 | 07.09.2026 |
SB2026090753 SB2026090764 SB2026090765 and 10 more |
||
| #VU146748 - Improper input validation CVE-2026-81524 |
CWE-20 | Low | 2.5.1-1.el10_3, 2.5.1-1.el10_4, 2.5.1-1.fc45, 2.5.2-1.el10_3, 2.5.2-1.el10_4, 2.5.2-1.fc45 | 02.09.2026 |
SB2026090254 SB2026090262 SB2026090263 and 8 more |
||
| #VU85419 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-0437 |
CWE-835 | Medium | 1.24.3-2.el8, 1.24.3-2.el9, 1.24.3-2.fc38 | 16.01.2024 |
SB2024011609 SB2024011614 SB2024011615 and 2 more |
||
| #VU15060 - Out-of-bounds read CVE-2018-16790 |
CWE-125 | Low | 1.13.0-1.fc29 | 01.10.2018 |
SB2018091003 SB2018091864 SB2018091865 and 3 more |