CVE-2025-14911

MEDIUM CVSS: 6.5 Published: 2026-01-27 Modified: 2026-06-17

Description

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.

Affected Platforms

Unknown

Weakness Type

CWE-120

References

https://jira.mongodb.org/browse/CDRIVER-6125