{"id":"CVE-2020-12135","details":"bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.","modified":"2026-04-10T04:18:40.348699Z","published":"2020-04-24T01:15:11.430Z","references":[{"type":"WEB","url":"https://usn.ubuntu.com/4450-1/"},{"type":"FIX","url":"https://github.com/10gen-archive/mongo-c-driver-legacy/commit/1a1f5e26a4309480d88598913f9eebf9e9cba8ca#diff-f7d29a680148f52d6601f59ed787f577"},{"type":"FIX","url":"https://launchpadlibrarian.net/474887364/bson-fix-overflow.patch"},{"type":"EVIDENCE","url":"https://bugs.launchpad.net/ubuntu/+source/whoopsie/+bug/1872560"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/10gen-archive/mongo-c-driver-legacy","events":[{"introduced":"0"},{"fixed":"41562d5cda9ca79af3d23a7463e5faf4f2a4e20a"},{"fixed":"1a1f5e26a4309480d88598913f9eebf9e9cba8ca"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"0.8"}]}}],"versions":["v0.1","v0.2","v0.3","v0.3.1","v0.4","v0.5","v0.5.1","v0.5.2","v0.6","v0.7","v0.7.1"],"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"0.2.69"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-12135.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}