CVE-2025-12119

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-12119
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-12119.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-12119
Aliases
Downstream
Published
2025-11-18T20:21:08.252Z
Modified
2026-07-08T08:11:56.160282364Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
Bulk write with options may read invalid memory
Details

A mongocbulkoperation_t may read invalid memory if large options are passed.

Database specific 
{
    "cna_assigner": "mongodb",
    "cwe_ids": [
        "CWE-825"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/12xxx/CVE-2025-12119.json"
}
References

Affected packages

Git / github.com/mongodb/mongo-c-driver

Affected ranges

Type
GIT
Repo
https://github.com/mongodb/mongo-c-driver
Events
Introduced
22791447aeb652803af8ba38a19880f5a03ea976
Fixed
0106ff90b108bbf312db122fec7d263543028355
Introduced
67817df0a9ed11b07e457477e6db1384da9421c4
Fixed
81c27ddadd54e80d9743dee0e8b7a0a862aa6ab5
Database specific 
{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.9.0"
        },
        {
            "fixed": "1.30.6"
        },
        {
            "introduced": "2.0.0"
        },
        {
            "fixed": "2.1.2"
        }
    ],
    "cpe": "cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:mongodb:*:*"
}
Type
GIT
Repo
https://github.com/mongodb/mongo-php-driver
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d62861079f1346d5d3426a910ab2abd6e6a8a2e4
Database specific 
{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.21.2"
        }
    ],
    "cpe": "cpe:2.3:a:mongodb:php_driver:*:*:*:*:*:mongodb:*:*"
}

Affected versions

0.*
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.2.0
0.3.0
0.3.1
0.4.0
0.4.1
0.5.0
0.5.1
0.6.0
0.6.1
0.6.2
0.6.3
1.*
1.0.0
1.0.0RC0
1.0.0alpha1
1.0.0alpha2
1.0.0beta1
1.0.0beta2
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.10.0alpha1
1.11.0
1.11.0alpha1
1.12.0
1.13.0
1.14.0
1.14.0beta1
1.15.0
1.17.0
1.18.0
1.2.0
1.2.0alpha1
1.2.0alpha2
1.2.0alpha3
1.2.1
1.2.2
1.2.3
1.21.0
1.21.1
1.3.0
1.3.0RC1
1.3.0beta1
1.3.0beta2
1.3.1
1.4.0RC1
1.4.0beta1
1.5.0
1.6.0RC1
1.6.0alpha1
1.6.0alpha2
1.6.0alpha3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-12119.json"