BIT-mongodb-2024-8654

vendorUSosv

MongoDB Server may access non-initialized region of memory leading to unexpected behaviour

view advisory published 2025-09-23Licence: per source

MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This issue affected MongoDB Server v6.0 version 6.0.3.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-8654US	critical9.8	0.37% (31st)	—	2024-09-10
MongoDB Server may access non-initialized region of memory leading to unexpected behaviour when zero arguments are called in internal aggregation stage. This issue affected MongoDB…

references

External citations — patches, advisories, analysis.

https://jira.mongodb.org/browse/SERVER-71477ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2024-8654WEB
https://security.netapp.com/advisory/ntap-20250516-0008/ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan