Threat intelligence / Vulnerability
CVE-2025-14847
MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client.
Vulnerability
TypeVulnerability
External ID—
First seen2025-12-29
Last seen2025-12-29
Confidence
—
MongoDB Server contains an improper handling of length parameter inconsistency vulnerability in Zlib compressed protocol headers. This vulnerability may allow a read of uninitialized heap memory by an unauthenticated client.
Labels
CISA KEV context
Vendor / productMongoDB MongoDB and MongoDB Server
Added2025-12-29
Due date2026-01-19
2 recorded
Relationships
2 external