PT-2025-42794 · Mongodb+1 · Mongodb Server+2

Published 2025-10-20 · Updated 2025-12-06 · CVE-2025-11979

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 7.0.25 MongoDB Server versions prior to 8.0.15 MongoDB Server version 8.2.0

Description An authorized user may crash the MongoDB server by causing a buffer over-read. This can occur by issuing a Data Definition Language (DDL) operation while queries are being issued, under specific conditions. The issue is related to a use-after-free condition in the query planner, potentially leading to a crash or undefined behavior.

Recommendations Update MongoDB Server to version 7.0.25 or later. Update MongoDB Server to version 8.0.15 or later. Update MongoDB Server to version 8.2.0 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-15582

BIT-MONGODB-2025-11979

CVE-2025-11979

Affected Products

Mongodb Server

Mongodb

Red Os

References · 14

• https://ubuntu.com/security/CVE-2025-11979 · Vendor Advisory
• https://jira.mongodb.org/browse/SERVER-105873 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-11979 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-11979 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15582 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-11979 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-11979 · Security Note
• https://osv.dev/vulnerability/BIT-mongodb-2025-11979 · Vendor Advisory
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-mongodb-org-cve-2025-11979 · Note
• https://twitter.com/CVEnew/status/1980338985617551363 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1980416759539621972 · Twitter Post
• https://t.me/CVEtracker/35329 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-mongodb-org-cve-2025-11979/?sphrase_id=1370848 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11979 · Note