CVE-2026-106435

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-106435
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-106435.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-106435
Downstream
Published
2026-10-08T20:12:15Z
Modified
2026-10-17T02:47:54Z
Severity
  • 5.9 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver
Details

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode_all API can cause the application process to terminate when the C extension is loaded. The driver's normal database wire-protocol path does not reach this code.

Database specific 
{
    "cna_assigner":  "mongodb",
    "cwe_ids":  [
        "CWE-125"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/106xxx/CVE-2026-106435.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "0.10.3"
                },
                {
                    "last_affected":  "4.18.2"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/mongodb/mongo-python-driver

Affected ranges

Type
GIT
Repo
https://github.com/mongodb/mongo-python-driver
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5479af6315dea9bd575bb374f72b645dfacbb3c3
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:mongodb:python_driver:*:*:*:*:*:mongodb:*:*",
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "4.18.3"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

0.*
0.10
0.10.1
0.10.2
0.10.3
0.11
0.11.1
0.11.2
0.11.3
0.12
0.13
0.14
0.14.1
0.14.2
0.15
0.15.1
0.15.2
0.16
0.4pre
0.5.1pre
0.5.2pre
0.5.3pre
0.5pre
0.6
0.7
0.7.1
0.7.2
0.8
0.8.1
0.9
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
1.*
1.0
1.1
1.1.1
1.1.2
1.10
1.10.1
1.11
1.2
1.2.1
1.3
1.4
1.5
1.5.1
1.6
1.7
1.8
1.8.1
1.9
2.*
2.0
2.0.1
2.1
2.1.1
2.2
2.2.1
2.2rc1
2.3
2.3rc1
2.4
2.4.1
2.4.2
2.5
2.5.1
2.6
2.7
2.7rc0
2.7rc1
3.*
3.0
3.0.1
3.0.2
3.0.3
3.0b0
3.0b1
3.0rc0
3.0rc1
3.1
3.1.1
3.10.0
3.10.1
3.11.0
3.11.0b0
3.11.0b1
3.11.0rc0
3.11.1
3.1rc0
3.2
3.2.1
3.2.2
3.2rc0
3.3.0
3.4.0
3.4rc0
3.5.0
3.5.1
3.6.0
3.6.1
3.6rc0
3.7.0
3.7.0b0
3.9.0
3.9.0b0
3.9.0b1
4.*
4.0
4.1.0
4.1.1
4.10.0
4.10.1
4.11
4.12.0
4.13.0
4.13.0.dev0
4.13.0.dev1
4.15.0
4.15.1
4.16.0
4.16.0.dev0
4.18.0
4.18.1
4.18.2
4.2.0
4.2.0b0
4.3.0
4.3.1
4.3.2
4.3.3
4.4.0
4.4.0b0
4.5.0
4.6.0
4.7.0
4.7.1
4.9
4.9.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-106435.json"