CVE-2026-18694 - An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries against this data could then result in the server accessing memory outside its intended bounds. This could result in a server crash (denial of service) and may expose a limited amount of server process memory. - 漏洞详情

漏洞编号：CVE-2026-18694

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-18694

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-125

发布/更新时间：2026-08-11 / 2026-08-28

漏洞描述

An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation. Subsequent queries against this data could then result in the server accessing memory outside its intended bounds. This could result in a server crash (denial of service) and may expose a limited amount of server process memory.

漏洞描述

相关链接

相关漏洞