CVE-2025-12119
Medium · 6.8MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory
CVSS
6.8
EPSS
0.2%
Published
Nov 19, 2025
CISA due date
—
The record
A mongoc_bulk_operation_t may read invalid memory if large options are passed.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | mongodb/mongodb-extension | 0 | 1.21.2 |
Related vulnerabilities
- GHSA-mwcc-7vpp-xmv9 MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory Same vulnerability
- CVE-2026-102010 A flaw was found in GCC. CWE-825
- CVE-2026-76891 Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CWE-825
- CVE-2026-76890 Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CWE-825
- CVE-2026-17523 A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged… CWE-825
- CVE-2026-54778 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET… CWE-825
- CVE-2026-58592 Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its… CWE-825
- CVE-2026-12610 A flaw was found in sssd. CWE-825