CVE-2024-5629: Debian Linux

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.

Affected products

• Debian Debian Linux: version 10.0 only
• MongoDB Pymongo: before 4.6.3 (fixed in 4.6.3)

Published 2024-06-05. Last modified 2026-06-17.