Skip to main content

Integer Overflow to Buffer Overflow

CVE-2024-6381

Medium
5.3/10

Summary

The "bson_strfreev" function in the MongoDB C driver library may be susceptible to an Integer Overflow where the function will try to free memory at a negative offset. This may result in Memory Corruption. This issue affected mongo-c-driver versions 1.10.0 through 1.26.1. This issue also affects the packages libbson versions 0.5.0 through 1.9.5 and python-bsonjs.

  • LOW
  • NETWORK
  • LOW
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • NONE

CWE-680 - Integer Overflow to Buffer Overflow

The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.

References

Advisory Timeline

  • Published