CVE-2025-0755 MongoDB C Driver bson library may be susceptible to buffer overflow
The various bson_append functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: MongoDB Inc
product: libbson
cpes: cpe:2.3:a:mongodb:libbson:0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.2.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.2.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.5.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.6.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.6.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.6.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.6.6:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.6.8:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.8.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.8.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:0.98.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.0:-:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.0:rc0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.7:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.8:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.9:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.10:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.1.11:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.2.0:-:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.2.0:beta1:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.2.0:rc0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.3.0:-:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.3.0:beta0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.3.0:rc0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.3.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.3.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.3.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.3.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.3.6:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.4.0:-:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.4.0:beta0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.4.0:beta1:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.0:-:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.0:rc0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.0:rc1:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.0:rc2:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.0:rc3:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.0:rc4:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.0:rc6:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.5.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.6.0:-:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.6.0:rc0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.6.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.6.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.7.0:-:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.7.0:rc0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.7.0:rc1:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.7.0:rc2:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.8.0:-:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.8.0:rc0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.8.0:rc1:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.9.0:-:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.9.0:rc0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.9.0:rc1:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.9.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.9.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.9.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.9.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.9.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.10.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.10.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.10.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.10.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.11.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.12.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.13.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.13.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.14.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.14.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.15.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.15.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.15.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.15.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.16.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.16.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.16.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.0:beta:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.0:beta2:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.0:rc0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.6:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.17.7:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.18.0:alpha:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.18.0:alpha2:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.18.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.19.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.19.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.19.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.20.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.20.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.21.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.21.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.21.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.22.0:beta0:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.22.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.22.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.22.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.23.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.23.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.23.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.23.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.23.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.23.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.24.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.24.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.24.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.24.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.24.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.25.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.25.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.25.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.25.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.25.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.26.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.26.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.26.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.27.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.27.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.27.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.27.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.27.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:libbson:1.27.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.6:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.7:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.8:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.10:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.11:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.12:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.13:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.14:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:7.0.15:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:8.0.0:*:*:*:*:*:*:*
default_status: unaffected
vendor: MongoDB Inc
product: MongoDB Server
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: selmelc
Published: 2025-03-18T09:01:04.793Z