CVE-2026-93395

score

0.3

cvss

5.3

epss

0.4%

published

2026-09-17

kev added

—

first seen

2026-10-21

libbson contains a heap out-of-bounds read caused by missing lower-bound validation in bson_new_from_buffer() when processing BSON data with zero-length prefix, letting unauthorized attackers cause denial of service via crafted input.