CVE-2025-13507: Time-series operations may cause internal BSON size limit to be exceed
Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8.2 versions prior to 8.2.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13507?
CVE-2025-13507 is classified as a medium severity vulnerability due to its potential to cause process termination.
How do I fix CVE-2025-13507?
To fix CVE-2025-13507, upgrade MongoDB Server to version 7.0.26 or higher, or 8.0.16 or higher.
What are the affected versions of MongoDB for CVE-2025-13507?
CVE-2025-13507 affects MongoDB Server versions before 7.0.26 and 8.0.16.
What impact does CVE-2025-13507 have on MongoDB users?
CVE-2025-13507 can lead to unexpected application crashes due to assert failures from oversized BSON document processing.
Is there a workaround for CVE-2025-13507?
There is no known workaround for CVE-2025-13507, updating to the fixed versions is recommended.