Memory-Safety Issue in MongoDB BI Connector ODBC Driver

CVE-2026-19004

What is CVE-2026-19004?

An application utilizing the MongoDB BI Connector ODBC Driver may encounter a memory-safety vulnerability when handling output parameters from stored procedures. This vulnerability can be exploited if an application connects to an untrusted or impersonated database server capable of delivering malformed metadata. Successful exploitation may lead to process termination, unintended disclosure of process memory, or in certain scenarios, allow for arbitrary code execution.

References