CVE-2026-107324

Name of the Vulnerable Software and Affected Versions MongoDB Go Driver (affected versions not specified)

Description An integer overflow occurs during BSON value-length handling, which can trigger a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor capable of supplying BSON bytes to an affected application can terminate the process, resulting in a denial of service. The driver's server-monitoring path includes panic recovery and is restricted to server-selection failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.