CVE Catalog

CVE-2026-35559

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.27%

19th percentile - higher than 19% of all known CVEs

Summary

The Amazon Athena ODBC driver before version 2.1.0.0 contains an out-of-bounds write vulnerability in query processing components. Specially crafted data can crash the driver during query operations.

Risk Assessment

An attacker can crash the ODBC driver, leading to service disruption and potential data loss.

Recommendation

Upgrade the Amazon Athena ODBC driver to version 2.1.0.0 or later.

Original NVD description (English source)

Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during query operations. To remediate this issue, users should upgrade to version 2.1.0.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS