CVE-2024-5629

An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.

Score

CVSS 3.1 8.1 High

Status

Modified - cna@mongodb.com

Published

2024-06-05

Last modified

2025-02-13

Weaknesses

CWE-125

Affected products

• Debian Linux (Debian)
• Pymongo (Mongodb)
• Python Driver (Mongodb)

References

• https://jira.mongodb.org/browse/PYTHON-4305
• https://lists.debian.org/debian-lts-announce/2024/06/msg00007.html
• https://lists.debian.org/debian-lts-announce/2024/09/msg00032.html