CVE-2025-12119: MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed.
Other sources
MongoDB driver extension affected by mongocbulkoperationt's read of invalid memory
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/mongodb/mongodb-extensionto a version that resolves this vulnerability.Fixed in 1.21.2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12119?
CVE-2025-12119 is classified as a high severity vulnerability due to the potential for memory corruption.
How do I fix CVE-2025-12119?
To fix CVE-2025-12119, upgrade the mongodb/mongodb-extension to version 1.21.2 or later.
What impact does CVE-2025-12119 have on systems?
CVE-2025-12119 can lead to undefined behavior and application crashes due to reading invalid memory.
Which software versions are affected by CVE-2025-12119?
Versions of mongodb/mongodb-extension prior to 1.21.2 are affected by CVE-2025-12119.
Is there a workaround for CVE-2025-12119?
There are no known workarounds for CVE-2025-12119; upgrading is the recommended action.