CVE Wiki Pixee · CVE intelligence
← All CVEs

CVE-2026-19001

Critical · CVSS 9.8
CVSS
9.8
nvd
EPSS
0.38%
31th pct
KEV
No
Class
oss containerizable
CWE-190

Description

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to abnormal termination and, under certain conditions, the potential for arbitrary code execution.

References

Status: profiled · ingested 2026-08-13T18:00:50.000Z