CVE-2025-12657: Malformed KMIP response may result in access violation
Published Nov 3, 2025
·Updated
The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations.
Affected Software
3 affected components
MongoDB MongoDB
MongoDB MongoDB>=6.0.0<7.0.22
MongoDB MongoDB>=8.0.0<8.0.10
Event History
Nov 3, 2025
CVE Published
via MITRE·09:03 PM
Data Sourced
via MITRE·09:03 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:18 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-12657?
CVE-2025-12657 is considered to be a moderate severity vulnerability due to its potential for read access violations.
2
How do I fix CVE-2025-12657?
To fix CVE-2025-12657, update your MongoDB installation to the latest version where this vulnerability is addressed.
3
What systems are affected by CVE-2025-12657?
CVE-2025-12657 affects all versions of MongoDB that include the KMIP response parser.
4
What type of attack is possible with CVE-2025-12657?
CVE-2025-12657 may allow an attacker to cause abnormal behavior in MongoDB leading to read access violations.
5
Is there a workaround for CVE-2025-12657?
Currently, there is no documented workaround for CVE-2025-12657 aside from applying the latest software updates.