Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

C Driver — Vulnerabilities & Security Advisories 18

All 18 CVE vulnerabilities found in C Driver, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities associated with the C Driver product, categorized under general software weaknesses. It serves as a centralized reference for tracking security issues specific to this database connectivity library. The content on this page collects vulnerability data for the C Driver, covering historical records from initial releases up to the most recent updates. This ensures that users have access to a comprehensive timeline of security incidents affecting the software. Here, you can discover critical insights by tracking the vendor's security advisories to understand the context and severity of each reported issue. You can also gain a deeper understanding of specific weakness classes, such as buffer overflows or injection flaws, that have impacted this product. Furthermore, the page allows you to look up the C Driver's vulnerability history, providing a clear view of how security issues have evolved over time. This information is essential for developers and administrators responsible for maintaining secure implementations of the driver. By reviewing these aggregated details, users can make informed decisions about patching, upgrading, or configuring their environments to mitigate known risks. The aggregation aims to simplify the process of assessing the security posture of the C Driver without requiring navigation through multiple disparate sources. This streamlined approach supports better risk management and compliance efforts for organizations relying on this software component.

Vendor: MongoDB

CVE ID Title CVSS Severity Published
CVE-2026-106438 Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver CWE-682 4.0 Medium 2026-10-08
CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver CWE-191 6.2 Medium 2026-10-08
CVE-2026-106431 One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver CWE-787 5.7 Medium 2026-10-08
CVE-2026-106428 Out-of-bounds read in SCRAM response parsing in MongoDB C Driver CWE-125 3.7 Low 2026-10-08
CVE-2026-96746 Heap buffer overflow via mid-scan command list growth in client topology monitoring CWE-787 6.5 Medium 2026-09-24
CVE-2026-93395 Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer() CWE-191 5.3 Medium 2026-09-17
CVE-2026-93394 libmongoc SCRAM client nonce-validation bypass CWE-303 3.7 Low 2026-09-17
CVE-2026-93393 Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream CWE-787 8.1 High 2026-09-17
CVE-2026-88036 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver CWE-943 8.3 High 2026-09-10
CVE-2026-88035 Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver CWE-190 4.7 Medium 2026-09-10
CVE-2026-84963 Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser CWE-681 5.3 Medium 2026-09-03
CVE-2026-84964 Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client CWE-415 5.9 Medium 2026-09-03
CVE-2026-84965 Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds CWE-190 5.1 Medium 2026-09-03
CVE-2026-84969 Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output CWE-787 3.7 Low 2026-09-03
CVE-2026-81524 Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver CWE-99 5.4 Medium 2026-08-27
CVE-2026-9100 Heap memory out of bounds read and crash in C Driver legacy GridFS file reader CWE-1285 5.9 Medium 2026-05-20
CVE-2026-6231 bson_validate may skip validation when processing certain inputs CWE-20 4.3 Medium 2026-04-13
CVE-2025-12119 Bulk write with options may read invalid memory CWE-825 6.8 Medium 2025-11-18

All 18 known CVE vulnerabilities affecting C Driver with full Chinese analysis, references, and POCs where available.