VYPR

BSON library

by MongoDB

CVEs (1)

  • CVE-2026-84965MedSep 3, 2026
    risk 0.33cvss 5.1epss

    An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a…