Memory Safety Issue in MongoDB BI Connector ODBC Driver

CVE-2026-81533

What is CVE-2026-81533?

An application utilizing the MongoDB BI Connector ODBC Driver may face a memory-safety issue caused by an unusually long sequence of digits in SQL statements following a LIMIT clause. This vulnerability arises in scenarios where the driver's optional prefetch setting is active, exacerbated by the driver copying the digit sequence into a fixed-size internal buffer without proper length validation. This flaw could permit a user to manipulate the numeric portion of a LIMIT clause, potentially leading to unexpected terminations of the hosting application process or memory corruption within that process.

References