CVE-2025-14847 is a high-severity vulnerability affecting MongoDB servers that can be exploited for remote code execution (RCE) attacks. The flaw is due to improper handling of length parameter inconsistency and can be exploited by unauthenticated threat actors in low-complexity attacks that don't require user interaction. A client-side exploit of the Server's zlib implementation can return uninitialized heap memory without authenticating to the server, allowing attackers to execute arbitrary code and potentially gain control of targeted devices.