MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element

影響: pip:pymongo >= 3.9.0, <= 4.18.2 → 4.18.3

The C extension's BSON decoder scans a Regex element's pattern and flags strings with strlen before checking the document's remaining length, so a crafted truncated Regex element can read past the end of the caller's buffer. bson.decode and bson.decode_all accept mmap and array buffers, which carry no NUL sentinel; the read can cross into unmapped memory and kill the process with an uncatchable SIGSEGV. Any application decoding untrusted BSON from such buffers is affected — impact is availabili…

GitHub Advisory Database에서 읽기

2026. 10. 28. 오전 12:36, GitHub Advisory Database에서 "MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex element"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Python, MongoDB. CVE: CVE-2026-106435.