---
id: CVE-2026-96746
title: >-
  An out-of-bounds write in the connection-monitoring logic of the MongoDB C
  Driver may allow an unauthenticated party who controls name resolution and the
  responses of the hosts named in a client's connection string to write beyond
  the en…
summary: >-
  An out-of-bounds write in the connection-monitoring logic of the MongoDB C
  Driver may allow an unauthenticated party who controls name resolution and the
  responses of the hosts named in a client's connection string to write beyond
  the en…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H'
cwe:
  - CWE-787
vendor: MongoDB
product: C Driver
affected:
  - c_driver < 1.30.12
  - c_driver >= 2.0.0 < 2.5.5
published: '2026-09-24'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T21:04:40.340'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-96746'
references:
  - url: 'https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.12'
    label: cna@mongodb.com
  - url: 'https://github.com/mongodb/mongo-c-driver/releases/tag/2.5.5'
    label: cna@mongodb.com
  - url: >-
      https://github.com/mongodb/mongo-c-driver/security/advisories/GHSA-frjf-h5jg-4v46
    label: cna@mongodb.com
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-96746.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-96746'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-96746'
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-24T17:10:23.359575Z'
ingestedAt: '2026-09-24T16:47:15.845Z'
---

## Overview

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who controls name resolution and the responses of the hosts named in a client's connection string to write beyond the end of a heap buffer. This may cause the application using the driver to terminate unexpectedly.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · updated 2026-09-24 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-96746.json)