{"id":"CVE-2026-106431","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-106431","generatedAt":"2026-10-28T04:18:30.552Z","title":"An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent process memory or terminate the process.","description":"An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary. An actor who can influence the size of documents serialized by an embedding application can corrupt adjacent process memory or terminate the process. Reaching this issue requires the application to use the BSON bulk-writer API and produce a precise cumulative document size.","published":"2026-10-08T19:16:59.000Z","lastModified":"2026-10-08T20:49:23.000Z","status":"Awaiting Analysis","sourceIdentifier":"cna@mongodb.com","cvss":{"version":"4.0","score":5.9,"severity":"MEDIUM","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-787"],"affected":[],"epss":{"score":0.00097,"percentile":0.0071,"date":"2026-10-27","history":[{"date":"2026-10-09","score":0.00097,"percentile":0.00683}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.10%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-08T19:16:59.000Z","detail":{"score":"5.9","severity":"MEDIUM","publishedAt":"2026-10-08T19:16:59.070Z"},"summary":"New CVE, medium severity (CVSS 5.9)."}],"references":[{"url":"https://jira.mongodb.org/browse/CDRIVER-6418","source":"cna@mongodb.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-106431","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}