CD
Product
C Driver
33
CVEs
0
On KEV
8.3
Max CVSS
2
New 30D
Severity mix
Critical 0High 15Medium 13Low 5
Watch
Add C Driver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106438 | 3.7 | Oct 8 | Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver Affected: 1.4.0 before 1.30.13; 2.0.0 before 2.5.6 |
| CVE-2026-93394 | 3.7 | Sep 17 | libmongoc SCRAM client nonce-validation bypass Affected: 2.0.0 before 2.3.2 |
| CVE-2026-84969 | 3.7 | Sep 3 | Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output Affected: 1.30.0 before 1.30.9; 2.0.0 before 2.5.2 |
| CVE-2026-4359 | 3.7 | Mar 17 | Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer Affected: before 1.30.8; 2.2.0 before 2.2.3 |
| CVE-2025-12119 | 3.3 | Nov 18 | A mongoc_bulk_operation_t may read invalid memory if large options are passed Affected: 1.9.0 before 1.30.6; 2.0.0 before 2.1.2 |
Showing 5