Unrated severityNVD Advisory· Published Sep 10, 2024· Updated May 16, 2025

MongoDB Server may access non-initialized region of memory leading to unexpected behaviour

CVE-2024-8654

Description

MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This issue affected MongoDB Server v6.0 version 6.0.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MongoDB/MongoDBv5
cpe:2.3:a:mongodb:mongodb:6.0.3:*:*:*:*:*:*:*
Range: 6.0.3
MongoDB/Serverllm-fuzzy
Range: = 6.0.3
osv-coords
pkg:bitnami/mongodb
Range: >= 6.0.0, < 6.0.15

Patches

Vulnerability mechanics

References

jira.mongodb.org/browse/SERVER-71477mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000