CVE-2025-12119
A mongoc_bulk_operation_t may read invalid memory if large options are passed.
- Score
- CVSS 4.0 6.9 Medium
- Status
- Modified - cna@mongodb.com
- Published
- 2025-11-18
- Last modified
- 2026-10-07
- Weaknesses
- CWE-825
Affected products
References
- https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.2
- https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.6
- https://github.com/mongodb/mongo-c-driver/releases/tag/2.1.2
- https://lists.debian.org/debian-lts-announce/2026/01/msg00009.html
