Memory Corruption in MongoDB BI Connector ODBC Driver

CVE-2026-18888

What is CVE-2026-18888?

The MongoDB BI Connector ODBC Driver is susceptible to a buffer overflow due to improper handling of floating point column values. Specifically, it converts these values into text without ensuring that the output fits within the designated buffer space. When the text representation of a sufficiently large floating point value is read, it can exceed the buffer limit, potentially leading to memory corruption and application crashes. This vulnerability can be exploited by users who have the capability to store data in collections that are accessed through the BI Connector, posing a significant risk to data integrity and application stability.

References