The bson_strfreev function in the MongoDB C driver library may be susceptible to an integer overflow where the function will try to free memory at a negative offset. This may result in memory corruption. This issue affected libbson versions prior to 1.26.2
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mongodb

Published: 2024-07-02T17:14:48.908Z

Updated: 2024-08-01T21:41:03.172Z

Reserved: 2024-06-27T08:03:35.321Z

Link: CVE-2024-6381

cve-icon Vulnrichment

Updated: 2024-08-01T21:41:03.172Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-02T18:15:03.963

Modified: 2024-11-21T09:49:32.210

Link: CVE-2024-6381

cve-icon Redhat

No data.