Read the docs
TI-2025-13600 Aliases CVE-2025-14911GHSA-pc4j-j33v-hr73

Integer Overflow in GridFS chunkSize Leading to Heap Allocation Failure

Priority LOW 31CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0033 26th percentileScored 2026-11-07
Fix Fixed Mongo-c-driver (MongoDB): 2.1.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MongoDBMongo-c-driverbefore 2.1.32.1.3Patch availableCNA
  • Mongo-c-driver VendorMongoDB Affected before 2.1.3 Fixed in 2.1.3 Patch available CNA

Remediation

  • Fix · CNA Mongo-c-driver (MongoDB) Fixed in 2.1.3

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Not affected: 2 products
  • Logging Subsystem for Red Hat OpenShift
  • Red Hat Openshift Data Foundation 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-14911
  2. 2026-10-03 Alias added: GHSA-pc4j-j33v-hr73

References

Other 1

  • TI-2019-08023 Code injection in mongo-express KEVCVSS 3.1CRITICAL 9.9
  • TI-2025-13542 Zlib compressed protocol header length confusion may allow memory read KEVCVSS 4.0HIGH 8.7
  • TI-2026-79432 BSON output corruption via out-of-range binary subtype in MongoDB C# Driver CVSS 4.0MEDIUM 6.9
  • TI-2026-79424 NoSQL command injection via mismatched BSON length in MongoDB C# Driver CVSS 4.0MEDIUM 6.9
  • TI-2026-79422 Unbounded memory growth in MongoDB C# Driver BSON deserialization CVSS 4.0HIGH 8.2
  • TI-2026-79427 Authentication bypass via issuer-and-serial-only certificate equality CVSS 4.0HIGH 7.6
See all 376 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences