Mongodb: >> Php Driver >> 1.19.2 Security Vulnerabilities
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended disclosure of limited memory contents.
CVSS Score
6.9
EPSS Score
0.002
Published
2026-09-03
A mongoc_bulk_operation_t may read invalid memory if large options are passed.
CVSS Score
6.9
EPSS Score
0.002
Published
2025-11-18