medium6.5
CVE-2026-84971
Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the …
Impact
Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the library. A party able to place a suitably formed encrypted value where an application will decrypt it, or able to control the responses the application receives, may cause that application to stop running.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mongodb | Libmongocrypt | from 1.7.0 before 1.20.4 |