{"id":"CVE-2025-13644","summary":"MongoDB may be susceptible to Invariant Failure due to batched delete","details":"MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server v7.0 versions prior to 7.0.26, MongoDB Server v8.0 versions prior to 8.0.13, and MongoDB Server v8.1 versions prior to 8.1.2","aliases":["BIT-mongodb-2025-13644"],"modified":"2026-08-12T15:13:36.986360Z","published":"2025-11-25T05:23:12.317Z","database_specific":{"cna_assigner":"mongodb","cwe_ids":["CWE-617"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13644.json","unresolved_ranges":[{"extracted_events":[{"introduced":"8.0"},{"fixed":"8.0.13"},{"introduced":"7.0"},{"fixed":"7.0.26"},{"introduced":"8.1"},{"fixed":"8.1.2"}],"source":"AFFECTED_FIELD"}]},"references":[{"type":"WEB","url":"https://jira.mongodb.org/browse/SERVER-101180"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13644.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13644"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mongodb/mongo","events":[{"introduced":"37d84072b5c5b9fd723db5fa133fb202ad2317f1"},{"fixed":"cfe96f2560c2000d837880f3e49086bed560abec"},{"introduced":"b41cda4fe697dce6fd9b83b3805362ccc02fbeb3"},{"fixed":"6a7c140ee43487f6b596c4825ab3c29451ab9cad"},{"introduced":"b6da7e2baf4c9d2732dca1f85e9204a9f5813922"},{"fixed":"aae5d55d1b9a803d5bf33dcaabc307767d672508"},{"introduced":"246b4fceaab08de8de2aa07c28ab06a06a8a2c61"},{"last_affected":"e1a5281f585ce2cf7f3d241835002c82d77ead48"}],"database_specific":{"cpe":["cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*","cpe:2.3:a:mongodb:mongodb:8.2.0:alpha:*:*:-:*:*:*","cpe:2.3:a:mongodb:mongodb:8.2.0:alpha0:*:*:-:*:*:*","cpe:2.3:a:mongodb:mongodb:8.2.0:alpha1:*:*:-:*:*:*","cpe:2.3:a:mongodb:mongodb:8.2.0:alpha2:*:*:-:*:*:*"],"extracted_events":[{"introduced":"7.0.0"},{"fixed":"7.0.26"},{"introduced":"8.0.0"},{"fixed":"8.0.13"},{"introduced":"8.1.0"},{"fixed":"8.1.2"},{"introduced":"8.2.0-alpha"},{"last_affected":"8.2.0-alpha"},{"introduced":"8.2.0-alpha0"},{"last_affected":"8.2.0-alpha0"},{"introduced":"8.2.0-alpha1"},{"last_affected":"8.2.0-alpha1"},{"introduced":"8.2.0-alpha2"},{"last_affected":"8.2.0-alpha2"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["8.2.0-alpha","8.2.0-alpha0","8.2.0-alpha1","8.2.0-alpha2","r7.0.24-rc0","r7.0.24","r7.0.25-alpha0","r8.0.13-rc1","r8.0.13-rc0","r7.0.23-rc1","r7.0.23","r7.0.23-rc0","r8.2.0-alpha2","r8.2.0-alpha1","r8.2.0-alpha0","r7.0.22-rc0","r7.0.22","r8.0.12-rc0","r8.0.12","r8.0.10-rc0","r8.0.10","r8.1.2-rc0","r8.1.1-rc0","r8.1.1","r8.1.0","r7.0.21-rc0","r7.0.21","r7.0.21-alpha0","r7.0.18","r8.0.6","r8.2.0-alpha","r7.0.17","r8.0.5-rc2","r8.0.5","r8.0.5-rc1","r8.0.5-rc0","r7.0.16-rc1","r7.0.16-rc0","r7.0.16","r8.0.4-rc0","r8.0.4","r7.0.15","r8.0.3","r8.0.2","r7.0.15-rc1","r7.0.15-rc0","r8.0.1-rc0","r8.0.1","r8.0.0","r7.0.14-rc0","r7.0.14","r7.0.13-rc1","r7.0.13","r7.0.13-rc0","r7.0.12-rc1","r7.0.12","r7.0.12-rc0","r7.0.11-rc2","r7.0.11","r7.0.11-rc1","r7.0.11-rc0","r7.0.10-rc0","r7.0.10","r7.0.9-rc1","r7.0.9","r7.0.9-rc0","r7.0.8-rc0","r7.0.8","r7.0.7-rc2","r7.0.7","r7.0.7-rc1","r7.0.7-rc0","r7.0.6-rc0","r7.0.6","r7.0.5-rc0","r7.0.5","r7.0.4-rc0","r7.0.4","r7.0.3-rc1","r7.0.3","r7.0.3-rc0","r7.0.2-rc2","r7.0.2","r7.0.2-rc1","r7.0.2-rc0","r7.0.1-rc0","r7.0.1","r7.0.0"],"database_specific":{"vanir_signatures":[{"source":"https://github.com/mongodb/mongo/commit/cfe96f2560c2000d837880f3e49086bed560abec","target":{"file":"src/mongo/util/net/ssl_manager_windows.cpp","function":"validatePeerCertificate"},"deprecated":false,"digest":{"function_hash":"169396510644917166107972285471505278925","length":5523},"id":"CVE-2025-13644-0d7700d5","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2025-13644-0dfbf4f9","signature_type":"Function","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"function":"jit::ExtractLinearSum","file":"src/third_party/mozjs/extract/js/src/jit/IonAnalysis.cpp"},"deprecated":false,"digest":{"function_hash":"180452319589069234629198624976346946716","length":1877}},{"target":{"file":"src/third_party/mozjs/extract/js/src/selfhosted.out.h"},"deprecated":false,"digest":{"line_hashes":["233822600020224691324687507502854917012","259237089265441588225020498284195966061","229874218253122892233995666813105954973","55368925209121119623273095661399711141","314821992127340870849716960477288607017","327763084793654983710366575691625801466"],"threshold":0.9},"id":"CVE-2025-13644-14e9685e","signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508"},{"signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/cfe96f2560c2000d837880f3e49086bed560abec","target":{"file":"src/mongo/util/net/ssl_manager_windows.cpp"},"deprecated":false,"digest":{"line_hashes":["255094620203238166973302767875286180987","311318788437859314187108745684874069447","13195629967762718487111799273423913192","145659902616350294817239749199959363992","221972074441494021565962355714822796262","48835208987546656192845547932509644477","87708939807646049295739831013123777386","10193593850898967193818537886210518552","331231889353555350497810337678926637920","152234860073312542299676805758359870241"],"threshold":0.9},"id":"CVE-2025-13644-1ac5af1d","signature_type":"Line"},{"source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/selfhosted.out.h","function":"GetCompressedSize"},"deprecated":false,"digest":{"function_hash":"191675906453157901159272051109947468773","length":37},"id":"CVE-2025-13644-1d3fd4b4","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2025-13644-2a67fb94","signature_type":"Function","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/wasm/WasmBinary.h","function":"Decoder::uncheckedReadValType"},"deprecated":false,"digest":{"function_hash":"300146235213517278099855578640286042880","length":785}},{"id":"CVE-2025-13644-42bd3dbe","signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/debugger/Object.cpp"},"deprecated":false,"digest":{"line_hashes":["21700428046421127421323555831707373147","324445372285871517778363069750912601082","262417669343811407928213421992344930407","299952912235979295938652992733765852220","223020179591167581922430840602120588042","76392391136404412266540356859748577865","144828547710741227951591612655053005257","26145320010660338685544800450383643863","86541778185874678926120678276585753216","138834464679224885110133430287273260509","200041923461716424633911745316845157553","231640357123275454755144961811740346281","62174931455083496885168091839217665020","243556370846504531133022359019318327295"],"threshold":0.9}},{"digest":{"function_hash":"322504896487733643987698766970184785592","length":1597},"id":"CVE-2025-13644-455305b8","signature_type":"Function","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/builtin/Promise.cpp","function":"PerformPromiseAllSettled"},"deprecated":false},{"target":{"file":"src/mongo/util/net/ssl_manager_apple.cpp"},"deprecated":false,"digest":{"line_hashes":["52207717764756858887103230689427858974","241284099896496899084843301553798842386","81015194422365157642401834775353309989","306832239360780013917147226125039650941"],"threshold":0.9},"id":"CVE-2025-13644-5d8a373e","signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/cfe96f2560c2000d837880f3e49086bed560abec"},{"id":"CVE-2025-13644-65361797","signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/debugger/Object.h"},"deprecated":false,"digest":{"line_hashes":["140842877367581695931817418870969911672","108067251684823228022865352906759739770","251660068452598843134418262341767187690","192807913338543405379286074249083399886"],"threshold":0.9}},{"signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/builtin/Promise.cpp","function":"PerformPromiseAny"},"deprecated":false,"digest":{"function_hash":"171501542211790821867295986610490881058","length":1273},"id":"CVE-2025-13644-6a504bb0","signature_type":"Function"},{"source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/builtin/Promise.cpp","function":"NewPromiseCombinatorElementFunction"},"deprecated":false,"digest":{"function_hash":"200424567389223175620134944935335508450","length":440},"id":"CVE-2025-13644-6aa40d49","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/builtin/Promise.cpp"},"deprecated":false,"digest":{"line_hashes":["283276770610229274924491311610727283694","223311302544631455400650617639170773676","90063100429139877285873388804530783760","86085151279178720650314156856234882904","281020118383435013146100190569239217843","41107567404056157565557688404100566184","74351063868903772963834321955788103156","13521039837103148814569341918912834406","36260041144618100554740435591761904336","27690225435035050917375120122411067943","340170013726206449029660710270577323766","310834946761694104279714660507503925920","300327435722999180465623099287620910591","297732544515367463996445480087937265088","132927470061641516546699686177790016323","322916841294094212156210439958241329426","224174525795944300072693503175789821262","261453120444748041829897796324417204613","186494106081938789454682331006281862576","115463443459467207833693268423115141894","283785597959310717935698531808900285382","321975638985055203906740549372562595906","296160540697433102304667749131991459915","29066835483433250460791559865200066316","22570878816278970340190322875676282147","330286656483869645358132993236668816325","263762099277281125664300343878149950130","294893919894491423666189688217690599620","150487368168266785051337651425975271302","230024687364551206152518585820098432605","272410783540586364171047192880359424275","85028545331126221101067072995880948630","123291067645900039128587761995629340470","114333194229050794000193313745741811255","287483403118004421870961078792251593088","106701195274063597005025773821420104303","264060692128552857235920370104676512465","206068674440720352432612411249474626906","152544295007594801375455971956626050761","12046842334037234715046261906265651976","57880048212257412984907743099810632821","331612528930379524563406120471904018249","221057826001161457927025969525954463022","197219904741988301573053111681590661496","111568082278382296268614383555711312153","246318035368099374259343171604051290832"],"threshold":0.9},"id":"CVE-2025-13644-6eae1795"},{"target":{"file":"src/third_party/mozjs/extract/js/src/jit/IonAnalysis.cpp"},"deprecated":false,"digest":{"line_hashes":["196138153632607061369037758940251727925","145301335159505806605133947050331798162","306803082390005738986358568781404053608"],"threshold":0.9},"id":"CVE-2025-13644-73460749","signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508"},{"deprecated":false,"digest":{"function_hash":"60854262378866240810463600752329606435","length":715},"id":"CVE-2025-13644-a2bd2a3d","signature_type":"Function","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/cfe96f2560c2000d837880f3e49086bed560abec","target":{"file":"src/mongo/util/net/ssl_manager_apple.cpp","function":"CreateSecTrustPolicies"}},{"id":"CVE-2025-13644-a7a731b0","signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/jsexn.cpp"},"deprecated":false,"digest":{"line_hashes":["40857198934976114917300351622884609538","45551216037773890516608805398904139164","282718185414854676338272859137864681412","91281966305183505001066319933948991922"],"threshold":0.9}},{"target":{"file":"src/third_party/mozjs/platform/s390x/linux/include/selfhosted.out.h"},"deprecated":false,"digest":{"line_hashes":["125791476823828993628408185059782113391","117954400900675147649404909394499574060","330775992030250075599705380910195595938","252995935497114430200490212827101586927","143953345646466956233951309294899363318","86592730623430710126091657217537817139"],"threshold":0.9},"id":"CVE-2025-13644-ac2ce78a","signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508"},{"signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/builtin/Promise.cpp","function":"PromiseCombinatorElementFunctionAlreadyCalled"},"deprecated":false,"digest":{"function_hash":"169967935600596441283618270024627156696","length":615},"id":"CVE-2025-13644-afb7d5d2","signature_type":"Function"},{"id":"CVE-2025-13644-b9ffa234","signature_type":"Function","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/builtin/Promise.cpp","function":"PerformPromiseAll"},"deprecated":false,"digest":{"function_hash":"96698668918143478879200112220370639509","length":1229}},{"signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/wasm/WasmBinary.h"},"deprecated":false,"digest":{"line_hashes":["80894074731980165663931623136891125118","31156884667780498534088508637093193674","41204151585887772467880372310145111402","5405185916617019004112002579371047201","134349003954023675296219499993385845495","244184485485950487077960682353299236566","137740464990169472504773074535927665416"],"threshold":0.9},"id":"CVE-2025-13644-d78c3f5c","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"264363265445513080133115658903053598429","length":2915},"id":"CVE-2025-13644-ecf0262f","signature_type":"Function","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/jsexn.cpp","function":"JS::ErrorReportBuilder::init"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/extract/js/src/builtin/Promise.cpp","function":"js::GetWaitForAllPromise"},"deprecated":false,"digest":{"length":1871,"function_hash":"256617234406531711737567600158479601688"},"id":"CVE-2025-13644-efec08c3"},{"source":"https://github.com/mongodb/mongo/commit/aae5d55d1b9a803d5bf33dcaabc307767d672508","target":{"file":"src/third_party/mozjs/platform/s390x/linux/include/selfhosted.out.h","function":"GetCompressedSize"},"deprecated":false,"digest":{"function_hash":"168397806618594857947973109860769300912","length":37},"id":"CVE-2025-13644-f36bf826","signature_type":"Function","signature_version":"v1"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-13644.json","vanir_signatures_modified":"2026-08-12T15:13:36Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}