Bug 2540321 (CVE-2026-96746) - CVE-2026-96746 mongo-c-driver: mongo-c-driver: Denial of Service via out-of-bounds write in connection monitoring
Summary: CVE-2026-96746 mongo-c-driver: mongo-c-driver: Denial of Service via out-of-b...
Keywords:
Status: NEW
Alias: CVE-2026-96746
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2540667 2540668
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-24 16:20 UTC by OSIDB Bzimport
Modified: 2026-09-24 18:21 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-24 16:20:34 UTC
An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the driver to terminate unexpectedly.


Note You need to log in before you can comment on or make changes to this bug.