CVE-2026-19001
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 0.38%
- 31th pct
- KEV
- No
- Class
- oss containerizable
- CWE-190
Description
The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to abnormal termination and, under certain conditions, the potential for arbitrary code execution.
References
Status: profiled · ingested 2026-08-13T18:00:50.000Z