C Driver
- Software type
- Database driver
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/21/2026, C Driver recorded 23 security vulnerabilities in the last 90 days, of which 5 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of C Driver and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-106438Silent Decimal128 value corruption via incorrect exactness check in MongoDB C DriverCVE-2026-106437Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C DriverCVE-2026-106431One-byte heap buffer overflow in BSON bulk document writer in MongoDB C DriverCVE-2026-106428Out-of-bounds read in SCRAM response parsing in MongoDB C DriverCVE-2026-96746Heap buffer overflow via mid-scan command list growth in client topology monitoring| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-106438Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-106437Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver | Exploitation statusNot exploited | FixYes | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-106431One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver | Exploitation statusNot exploited | FixYes | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-106428Out-of-bounds read in SCRAM response parsing in MongoDB C Driver | Exploitation statusNot exploited | FixYes | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-96746Heap buffer overflow via mid-scan command list growth in client topology monitoring | Exploitation statusNot exploited | FixYes | Published09/24/2026 | SeverityHigh |
|---|
CVE-2026-88036GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityMedium |
|---|
CVE-2026-88035Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityMedium |
|---|
CVE-2026-84963Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser | Exploitation statusNot exploited | FixYes | Published09/03/2026 | SeverityMedium |
|---|
CVE-2026-84964Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client | Exploitation statusNot exploited | FixYes | Published09/03/2026 | SeverityHigh |
|---|
CVE-2026-84965Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds | Exploitation statusNot exploited | FixYes | Published09/03/2026 | SeverityMedium |
|---|
13 Results | Page 1 of 2