CVE-2025-0755: MongoDB C Driver bson library may be susceptible to buffer overflow
The various bsonappend functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0755?
CVE-2025-0755 is classified as a high severity vulnerability due to its potential to cause buffer overflow and segmentation faults.
How do I fix CVE-2025-0755?
To fix CVE-2025-0755, upgrade to versions of MongoDB Server and libbson that are later than 8.0.1 and 1.27.5 respectively.
What are the consequences of exploiting CVE-2025-0755?
Exploiting CVE-2025-0755 may lead to application crashes or unintended behavior due to the segmentation fault caused by buffer overflow.
Which versions of MongoDB are affected by CVE-2025-0755?
MongoDB Server versions prior to 8.0.1 and 7.0.16, as well as libbson versions before 1.27.5, are affected by CVE-2025-0755.
Are there any known exploits for CVE-2025-0755?
As of now, there are no known public exploits for CVE-2025-0755, but the vulnerability poses a significant risk if not addressed.