CVE-2026-84971 — Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path
Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the …
Published: 2026-09-03 · CVSS: 7.1 · CVSS 4.0
Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the library. A party able to place a suitably formed encrypted value where an application will decrypt it, or able to control the responses the application receives, may cause that application to stop running.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7