Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior to 7.0.32
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://jira.mongodb.org/browse/SERVER-119981 Issue Tracking, Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.1 · mongodbNVD modified 2026-10-26 20:10
Affected (CPE criteria) 1
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
References 1
- https://jira.mongodb.org/browse/SERVER-119981 Issue Tracking, Patch