Descrição
An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.
CVSS 6.5EPSS 0.27%Risco 0.67
Ver fonte- Publicação
- 2026-06-09 23:17:04
- Versões afetadas
- unknown
- Tipo
- Core software
- Última alteração
- 2026-07-23 09:10:00
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H