Data modification via unchecked message-size arithmetic

Integer-conversion errors in MongoDB Rust Driver 2.0 through 2.8.1 allow remote authenticated users to modify data via crafted strings. The message serializer performs unchecked integer conversions and arithmetic on buffer sizes, allowing calculated values to wrap or truncate and form unintended server commands. Exploitation requires an application to pass attacker-controlled strings to the driver, and resulting commands remain bounded by that application's MongoDB permissions.