SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-84965

MEDIUM · CVSS 5.1 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability arises from an integer wraparound in the BSON library's JSON parsing code, which can lead to a buffer being released while a subsequent copy operation continues to write through a stale pointer. This flaw allows an unauthenticated attacker to exploit applications that utilize the library by supplying a large JSON input, potentially causing unexpected termination and resulting in denial of service. Organizations using the BSON library in their applications should prioritize remediation to mitigate the risk of service disruption.

CVE
CVE-2026-84965
Severity
MEDIUM
CVSS
5.1
EPSS
0.10%

Original NVD Description

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service.