Medium severity5.3NVD Advisory· Published Jan 12, 2024· Updated Jun 17, 2026

CVE-2023-0437

Description

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MongoDB/C\# Driver
cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:mongodb:*:*
Range: <1.25.0
MongoDB/MongoDB PHP Driverllm-fuzzy
Range: <1.25.0
MongoDB Inc/MongoDB C Driverv5
Range: 1.0.0

Patches

Vulnerability mechanics

References

jira.mongodb.org/browse/CDRIVER-4747nvdIssue TrackingVendor Advisory
lists.debian.org/debian-lts-announce/2025/05/msg00012.htmlnvd
lists.debian.org/debian-lts-announce/2025/05/msg00027.htmlnvd
lists.fedoraproject.org/archives/list/[email protected]/message/7GUVOAFZFSYTNBF6R7H4XJM5DHWBRQ6P/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000