Buffer Overflow in MongoDB Connector for BI ODBC Driver

CVE-2026-81532

What is CVE-2026-81532?

This vulnerability allows an attacker to exploit the MongoDB Connector for BI ODBC driver by submitting SQL through an application. Specifically, a positioned-cursor statement with an excessively long cursor name can lead to an overflow of an internal fixed-length buffer. This exploitation occurs due to a lack of proper boundary checking before the driver processes the cursor name, resulting in the overwriting of adjacent memory locations. Such actions can disrupt the application's normal operations, potentially causing it to crash, and may also create opportunities for unauthorized code execution.

References