CVE-2026-19002
Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its place, in order to return malformed metadata. The resulting memory corruption may cause the client application to terminate abnormally or, under certain conditions, execute unintended code.
| CWE | CWE-120 |
| Vendor | mongodb |
| Product | bi connector odbc driver |
| Ecosystems | |
| Industries | Technology |
| Published | Aug 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for mongodb bi connector odbc driver
Be the first to know when new high vulnerabilities affecting mongodb bi connector odbc driver are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
MongoDB / BI Connector ODBC Driver
1.0.0 < 1.4.9