Skip to content
Heist/ feed
HighFix available

Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure

Type: advisorySource: OSV1 source record

An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries against this data could then result in the server accessing memory outside its intended bounds. This could result in a server crash (denial of service) and may expose a limited amount of server process memory.

Announced Source revision 1
Original source ↗

BIT-mongodb-2026-18694

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:BIT-mongodb-2026-18694

mongodb

Source reference: /affected/0/package/name

Affected versions
Not stated in this record
Fixed versions
7.0.40

Source reference: /affected/0/ranges

8.0.29

Source reference: /affected/0/ranges

8.3.8

Source reference: /affected/0/ranges

9.0.2

Source reference: /affected/0/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "SEMVER",
        "events": [
          {
            "introduced": "7.0.0"
          },
          {
            "fixed": "7.0.40"
          },
          {
            "introduced": "8.0.0"
          },
          {
            "fixed": "8.0.29"
          },
          {
            "introduced": "8.2.0"
          },
          {
            "fixed": "8.3.8"
          },
          {
            "introduced": "9.0.0"
          },
          {
            "fixed": "9.0.2"
          }
        ]
      }
    ],
    "package": {
      "name": "mongodb",
      "purl": "pkg:bitnami/mongodb",
      "ecosystem": "Bitnami"
    },
    "severity": [
      {
        "type": "CVSS_V4",
        "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
      }
    ],
    "database_specific": {
      "source": "https://github.com/bitnami/vulndb/tree/main/data/mongodb/BIT-mongodb-2026-18694.json"
    }
  }
]
Related CVEs
CVE-2026-18694

Source reference: /aliases

Publisher severity

high

Source reference: /database_specific/severity

Event
#59514 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement