CVE-2026-84970

Name of the Vulnerable Software and Affected Versions MongoDB C++ Driver (affected versions not specified)

Description A numeric truncation weakness exists in the JSON parsing component of the BSON library. An actor who controls the text passed to the public JSON parsing interface can cause the library to read memory beyond the supplied buffer and return it to the caller, silently accept only part of the input as a complete document, or terminate the process when the input text is very large. This issue is confined to the process using the library and does not require a MongoDB server, credentials, or non-default configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.