New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory

A high-severity vulnerability (CVE-2025-14847) has been discovered in MongoDB with a CVSS score of 8.7. The flaw allows unauthenticated attackers to read uninitialized heap memory due to improper handling of length parameter inconsistency. This represents a significant security risk as it enables unauthorized memory access without requiring authentication. The vulnerability stems from inadequate handling of scenarios where length fields are inconsistent with actual data, potentially exposing sensitive information stored in memory.