CVE-2026-19001
CriticalCVSS 9.8Summary
The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to abnormal termination and, under certain conditions, the potential for arbitrary code execution.
Risk Assessment
Memory corruption can lead to application crashes or remote code execution, posing a serious risk to system integrity and confidentiality.
Recommendation
Update the MongoDB BI Connector ODBC Driver to a patched version and limit the length of names passed to metadata functions.
Original NVD description (English source)
The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to abnormal termination and, under certain conditions, the potential for arbitrary code execution.