A mongoc_bulk_operation_t may read invalid memory if large options are passed.
Weakness
The product dereferences a pointer that contains a location for memory that was previously valid, but is no longer valid.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| C_driver | Mongodb | 1.9.0 (including) | 1.30.6 (excluding) |
| C_driver | Mongodb | 2.0.0 (including) | 2.1.2 (excluding) |
| Php_driver | Mongodb | * | 1.21.2 (excluding) |
| Mongo-c-driver | Ubuntu | plucky | * |
| Mongo-c-driver | Ubuntu | upstream | * |
| Php-mongodb | Ubuntu | plucky | * |