## MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element

- 種別: advisory
- 重大度: high
- 関連技術: python, mongodb
- CVE: CVE-2026-106435
- 公開日時: 2026-10-27T15:36:35.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-98qm-wvgf-w4cf)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-98qm-wvgf-w4cf

影響: pip:pymongo >= 3.9.0, <= 4.18.2 → 4.18.3
The C extension's BSON decoder scans a Regex element's pattern and flags strings with strlen before checking the document's remaining length, so a crafted truncated Regex element can read past the end of the caller's buffer. bson.decode and bson.decode_all accept mmap and array buffers, which carry no NUL sentinel; the read can cross into unmapped memory and kill the process with an uncatchable SIGSEGV. Any application decoding untrusted BSON from such buffers is affected — impact is availabili…