CVE-2026-120678 - mongo-c-driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)
CVE ID :CVE-2026-120678 Published : Nov. 3, 2026, 6:39 p.m. | 25 minutes ago Description :A memory management flaw in the MongoDB C Driver's handling of compressed responses may cause the client library to hold on to memory that is never released. An unauthenticated party that controls the...