Zurück zur CVE-Übersicht
CVE-2026-84971
MEDIUM(6.5)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Risk Signal Score16/100 — NIEDRIG
- CVSS 6.5 — Mittel
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.2%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
6.5
Technische Schwere
Beschreibung
Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the library. A party able to place a suitably formed encrypted value where an application will decrypt it, or able to control the responses the application receives, may cause that application to stop running.
Betroffene Produkte
- cpe:2.3:a:mongodb:libmongocrypt:*:*:*:*:*:*:*:*