CVE-2026-81532: BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message, memory adjacent to that buffer is overwritten with user-supplied content. This can terminate the hosting application process and may allow unintended code to run within it.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker must be able to submit SQL through an application that uses the MongoDB Connector for BI ODBC driver. Exploitation involves supplying a positioned-cursor statement with an oversized cursor name.
What is the likely impact on an affected application?
The memory overwrite can terminate the hosting application process. It may also allow unintended code to run within that application's process.