CyberRota Analysis
AI-GeneratedThe MongoDB Python Driver's binary accelerator is vulnerable to a buffer read issue when processing malformed BSON with a truncated regular-expression element lacking a trailing NUL byte. This flaw can lead to application crashes when the decode or decode_all API is invoked with malicious input, particularly if the C extension is in use. Organizations using the MongoDB Python Driver should prioritize addressing this vulnerability to prevent potential application instability.
Original NVD Description
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode_all API can cause the application process to terminate when the C extension is loaded. The driver's normal database wire-protocol path does not reach this code.
Related CVEs
Other vulnerabilities affecting the same vendor(s)