MongoDB Vulnerabilities and Affected Products
Vulnerabilities associated with Mongo-c-driver.
Products
Clear product- MongoDB Server65 vulnerabilities
- mongodb9 vulnerabilities
- BI Connector ODBC Driver6 vulnerabilities
- Atlas SQL ODBC Driver2 vulnerabilities
- Schema Builder CLI2 vulnerabilities
- BSON::XS1 vulnerability
- C Driver1 vulnerability
- c\#_driver1 vulnerability
- c_driver1 vulnerability
- java_driver1 vulnerability
- Mongo-c-driver1 vulnerability
- mongo-express1 vulnerability
- MongoDB and MongoDB Server1 vulnerability
- MongoDB Compass1 vulnerability
- MongoDB Driver1 vulnerability
- mongodb_server1 vulnerability
- PHP Driver1 vulnerability
- Rust Driver1 vulnerability
- rust_driver1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-14911HIGH | Integer Overflow in GridFS chunkSize Leading to Heap Allocation FailureUser-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container. CWE-120Jan 27, 2026 | CVSS7.1v4.0 | EPSS0.275% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |