CVE-2025-14911

medium

Red Hat

CVSS v3 Base Score

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Published: January 27, 2026

Last Modified: January 27, 2026

Vendor: Red Hat

Description

User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.

CWE-1284

Logging Subsystem for Red Hat OpenShiftRed Hat Openshift Data Foundation 4