Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-96749
By Stav Salman |
26 September 2026
CVE-2026-96749 – MongoDB Python Driver BSON encoder integer overflow enables out-of-bounds write in native extension
Integer overflow in pymongo BSON document encoding in the bundled native extension can occur when encoding a single document built from unusually large caller-supplied data. Signed 32-bit size arithmetic and an undefined-behavior overflow guard can lead to an out-of-bounds write in-process. Affected: Versions 1.9.0 to 4.18.1. Upgrade to 4.18.2 to mitigate.