CVE-2026-19001

Summary

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to abnormal termination and, under certain conditions, the potential for arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
MongoDBBI Connector ODBC Driver1.0.0 < 1.4.9affected

Weaknesses

  • CWE-190: CWE-190: Integer overflow or wraparound

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References