Medium severity5.3NVD Advisory· Published Sep 3, 2026· Updated Sep 10, 2026
CVE-2026-84968
CVE-2026-84968
Description
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended disclosure of limited memory contents.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- jira.mongodb.org/browse/PHPC-2744nvdVendor Advisory
News mentions
1- MongoDB: Ten Driver and Extension Vulnerabilities Disclosed TogetherVypr Intelligence · Sep 3, 2026