CVE-2020-12135
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.
MEDIUM · CVSS 5.5
EPSS 0.00349
Schedule remediation
- Public exploit or PoC is available
Sigma rules0
YARA rules0