Description (CNA)
An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MongoDB Inc / PyMongo | affected 0 through 4.6.2 |
CWE
CWE-125
References
- https://jira.mongodb.org/browse/PYTHON-4305
- https://lists.debian.org/debian-lts-announce/2024/06/msg00007.html
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.