CVE-2026-84965

MediumCVSS 5.1

Published: 03/09/2026(UTC)Updated: 22/09/2026(UTC)Translated: 03/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On 32-bit builds, an unauthenticated party able to supply a sufficiently large JSON input to an application may cause it to terminate unexpectedly, resulting in denial of service.

Risk Assessment

The risk includes application crash (denial of service) due to unexpected process termination, potentially affecting service availability.

Recommendation

It is recommended to update the BSON library to a version that includes a fix for this vulnerability.

Other vulnerabilities in BSON library

CVE-2026-120954Low
A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when computing the number of elements described by an oversized attacker-supplied value. On builds where the platform word size is 32 bits, an application that parses untrusted BSON data can be made to process only a small fraction of the supplied elements while the operation reports success, producing results that disagree with byte-oriented accessors and with 64-bit builds of the same library. No authentication or user interaction is required beyond getting the application to parse the data. The impact is limited to data integrity; memory safety is not affected and no information is disclosed.

Original NVD description (English source)

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS