CVE-2025-0755
High
Description
The various bson_append functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16
SeverityHigh
CVSS8.4
Exploit probability56. percentile0.8%
Product
Mongodb Libbson
PublishedMar 18, 2025
First seenMar 18, 2025
Weakness typeCWE-122CWE-122
How to fix
Update
- mongodb libbson1.27.5 or later
- mongodb mongodb7.0.16 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mongodb libbson | v < 1.27.5 | 1.27.5 |
| mongodb mongodb | 7.0.0 ≤ v < 7.0.16, 8.0.0 | 7.0.16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.