VYPR

libbson

by Libbson

CVEs (1)

  • CVE-2026-93395MedSep 17, 2026
    risk 0.34cvss 5.3epss

    A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the input buffer but does not verify that the value is at least 5…