MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element

影響: pip:pymongo >= 3.9.0, <= 4.18.2 → 4.18.3

The C extension's BSON decoder scans a Regex element's pattern and flags strings with strlen before checking the document's remaining length, so a crafted truncated Regex element can read past the end of the caller's buffer. bson.decode and bson.decode_all accept mmap and array buffers, which carry no NUL sentinel; the read can cross into unmapped memory and kill the process with an uncatchable SIGSEGV. Any application decoding untrusted BSON from such buffers is affected — impact is availabili…

GitHub Advisory Databaseで読む

2026/10/28 00:36、GitHub Advisory Databaseが「MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「重要」(high) です。関連する技術: Python、MongoDB。CVE: CVE-2026-106435。